[Mon Nov 10 21:46:12.051506 2025] [authz_core:error] [pid 31029:tid 31068] [client 159.65.144.72:50618] AH01630: client denied by server configuration: /usr/local/apache/htdocs/suspended-page/server-status
[Mon Nov 10 21:46:14.277059 2025] [:error] [pid 31030:tid 31080] [client 159.65.144.72:50646] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.env"] [unique_id "aRHspjdQpWeECLLAfnZj0wAAAEQ"]
[Mon Nov 10 21:46:14.830363 2025] [:error] [pid 31031:tid 31125] [client 159.65.144.72:47550] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRHspnI8L5KZTd8nCaaOeAAAAJY"]
[Mon Nov 10 21:46:17.029359 2025] [:error] [pid 31029:tid 31072] [client 159.65.144.72:47592] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Nov 11 01:06:58.208381 2025] [:error] [pid 24554:tid 24576] [client 104.248.12.193:42566] [client 104.248.12.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.12.193, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRIbshbgcg5JFvN-BGVpCwAAAtI"]
[Tue Nov 11 01:06:58.213100 2025] [:error] [pid 24554:tid 24576] [client 104.248.12.193:42566] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 01:06:59.964381 2025] [:error] [pid 24554:tid 24576] [client 104.248.12.193:42574] [client 104.248.12.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.12.193, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRIbsxbgcg5JFvN-BGVpDgAAAtI"]
[Tue Nov 11 01:06:59.971511 2025] [:error] [pid 24554:tid 24576] [client 104.248.12.193:42574] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 03:54:13.472284 2025] [:error] [pid 43436:tid 43487] [client 50.6.2.244:35236] [client 50.6.2.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.2.244, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aRJC5duzjoymDUxEiDgGtAAAAFQ"]
[Tue Nov 11 03:54:13.477923 2025] [:error] [pid 43436:tid 43487] [client 50.6.2.244:35236] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 11 06:03:01.695998 2025] [:error] [pid 34002:tid 34007] [client 182.44.67.97:46586] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRJhFdNx46Ag0u620oqwRwAAAAE"]
[Tue Nov 11 06:42:16.957404 2025] [:error] [pid 33888:tid 33913] [client 134.209.215.45:35738] [client 134.209.215.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.215.45, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aRJqSIhA0uVBNwBRvPr5iQAAAJY"]
[Tue Nov 11 06:42:16.963695 2025] [:error] [pid 33888:tid 33913] [client 134.209.215.45:35738] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 11 09:30:09.823971 2025] [:error] [pid 53355:tid 53365] [client 64.225.56.81:52920] [client 64.225.56.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRKRoYB5X5A3rMc4_nDJDAAAAAc"]
[Tue Nov 11 12:16:35.591395 2025] [:error] [pid 53356:tid 53401] [client 203.33.203.148:51684] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRK4o-kdmt0kzjVcUN9oogAAAFA"]
[Tue Nov 11 13:02:38.137508 2025] [:error] [pid 53355:tid 53376] [client 159.65.182.197:47348] [client 159.65.182.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRLDboB5X5A3rMc4_nAMNwAAABI"]
[Tue Nov 11 13:02:39.387468 2025] [:error] [pid 53449:tid 53475] [client 159.65.182.197:53330] [client 159.65.182.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRLDb9pz08j5NoUSzp8CCAAAAVU"]
[Tue Nov 11 17:02:26.654671 2025] [:error] [pid 36578:tid 36600] [client 182.71.77.58:52153] [client 182.71.77.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.71.77.58, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aRL7okMi03XeylcOo5WrYwAAANE"]
[Tue Nov 11 17:02:26.659710 2025] [:error] [pid 36578:tid 36600] [client 182.71.77.58:52153] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 11 17:19:47.455274 2025] [:error] [pid 36673:tid 36678] [client 5.250.187.192:50152] [client 5.250.187.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.187.192, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRL_syvASiSDHs9bkffhDQAAAIM"]
[Tue Nov 11 17:19:47.459512 2025] [:error] [pid 36673:tid 36678] [client 5.250.187.192:50152] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 17:19:48.536162 2025] [:error] [pid 36673:tid 36691] [client 5.250.187.192:50158] [client 5.250.187.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.187.192, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRL_tCvASiSDHs9bkffhDwAAAJA"]
[Tue Nov 11 17:19:48.544445 2025] [:error] [pid 36673:tid 36691] [client 5.250.187.192:50158] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 19:46:53.164587 2025] [:error] [pid 36578:tid 36607] [client 195.26.243.5:57849] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Tue Nov 11 19:46:55.590138 2025] [:error] [pid 36580:tid 36648] [client 195.26.243.5:59975] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Tue Nov 11 20:03:58.652149 2025] [:error] [pid 36579:tid 36629] [client 43.152.72.247:34554] [client 43.152.72.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRMmLumuedRSntjwLw6GfgAAABI"]
[Tue Nov 11 22:35:11.701104 2025] [:error] [pid 49628:tid 49632] [client 104.248.12.193:36668] [client 104.248.12.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.12.193, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRNJn782AgnfnwL7V2ZAWgAAAII"]
[Tue Nov 11 22:35:11.705264 2025] [:error] [pid 49628:tid 49632] [client 104.248.12.193:36668] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 22:35:14.303947 2025] [:error] [pid 47860:tid 47895] [client 104.248.12.193:36346] [client 104.248.12.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.12.193, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRNJoqPe6bkmJWx80CzcqQAAAEQ"]
[Tue Nov 11 22:35:14.316241 2025] [:error] [pid 47860:tid 47895] [client 104.248.12.193:36346] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 23:07:21.295834 2025] [:error] [pid 47859:tid 47870] [client 159.65.182.197:49726] [client 159.65.182.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRNRKaRzLR7egYHK_4ePLwAAAAY"]
[Tue Nov 11 23:07:23.771526 2025] [:error] [pid 47860:tid 47910] [client 159.65.182.197:57902] [client 159.65.182.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRNRK6Pe6bkmJWx80CznZAAAAFM"]
[Tue Nov 11 23:49:41.451944 2025] [:error] [pid 47964:tid 47987] [client 159.65.182.197:37228] [client 159.65.182.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRNbFV6CQC3ebUS5pkQsNQAAAZQ"]
[Tue Nov 11 23:49:43.031357 2025] [:error] [pid 49628:tid 49647] [client 159.65.182.197:39376] [client 159.65.182.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRNbF782AgnfnwL7V2ZlWgAAAJE"]
[Wed Nov 12 01:12:31.342273 2025] [:error] [pid 54700:tid 54951] [client 113.141.91.58:43691] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRNuf2B5AaOtkwsSKToKOQAAAE4"]
[Wed Nov 12 01:54:06.692463 2025] [:error] [pid 40747:tid 40804] [client 159.65.182.197:37204] [client 159.65.182.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRN4Pv9Knd3RnQx09rLXvgAAAIA"]
[Wed Nov 12 01:54:10.519705 2025] [:error] [pid 40746:tid 40787] [client 159.65.182.197:41972] [client 159.65.182.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRN4Qp75CjGFTLdEMn70ngAAAEo"]
[Wed Nov 12 03:39:43.512768 2025] [:error] [pid 5443:tid 5514] [client 159.65.182.197:49782] [client 159.65.182.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aROQ_82HU_9U8F2evyQRlAAAAIY"]
[Wed Nov 12 03:39:45.099135 2025] [:error] [pid 5443:tid 5515] [client 159.65.182.197:40380] [client 159.65.182.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRORAc2HU_9U8F2evyQRlwAAAIc"]
[Wed Nov 12 04:41:18.359640 2025] [:error] [pid 32959:tid 32963] [client 45.153.34.41:52950] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aROfbnoyrq7OJfcFnDifeAAAAQA"]
[Wed Nov 12 04:49:35.842574 2025] [:error] [pid 32959:tid 32967] [client 45.153.34.41:34438] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aROhX3oyrq7OJfcFnDij0wAAAQQ"]
[Wed Nov 12 07:19:23.906025 2025] [:error] [pid 57312:tid 57332] [client 222.79.103.59:56830] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRPEe40cuHgB17JK5qXsdQAAAM8"]
[Wed Nov 12 10:53:27.441669 2025] [:error] [pid 60097:tid 60142] [client 64.227.32.66:33082] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v2/api-docs"] [unique_id "aRP2p8dT5oio_TbWpi_s-wAAAMA"]
[Wed Nov 12 10:53:28.167782 2025] [:error] [pid 60405:tid 60419] [client 64.227.32.66:33088] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v3/api-docs"] [unique_id "aRP2qHMGv_mlVi6mf5pckgAAAAs"]
[Wed Nov 12 10:53:28.894700 2025] [:error] [pid 60097:tid 60168] [client 64.227.32.66:33102] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/api-docs/swagger.json"] [unique_id "aRP2qMdT5oio_TbWpi_tAAAAAM8"]
[Wed Nov 12 10:53:29.618114 2025] [:error] [pid 60180:tid 60205] [client 64.227.32.66:33108] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/api/swagger.json"] [unique_id "aRP2qVhgd7ccS8EZg1qq-gAAAVc"]
[Wed Nov 12 10:53:30.339905 2025] [:error] [pid 60405:tid 60416] [client 64.227.32.66:33116] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/@vite/env"] [unique_id "aRP2qnMGv_mlVi6mf5pcmAAAAAg"]
[Wed Nov 12 10:53:31.134356 2025] [:error] [pid 60405:tid 60427] [client 64.227.32.66:33132] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/actuator/env"] [unique_id "aRP2q3MGv_mlVi6mf5pcmwAAABM"]
[Wed Nov 12 10:53:31.956792 2025] [:error] [pid 60405:tid 60408] [client 64.227.32.66:33142] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/server"] [unique_id "aRP2q3MGv_mlVi6mf5pcnAAAAAA"]
[Wed Nov 12 10:53:32.690843 2025] [:error] [pid 12744:tid 12765] [client 64.227.32.66:33154] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/.vscode/sftp.json"] [unique_id "aRP2rJ1cp_ouUvkFj0WGKgAAARE"]
[Wed Nov 12 10:53:33.414281 2025] [:error] [pid 60180:tid 60186] [client 64.227.32.66:33156] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/about"] [unique_id "aRP2rVhgd7ccS8EZg1qq_AAAAUQ"]
[Wed Nov 12 10:53:34.144820 2025] [:error] [pid 60405:tid 60416] [client 64.227.32.66:33158] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/debug/default/view"] [unique_id "aRP2rnMGv_mlVi6mf5pcoAAAAAg"]
[Wed Nov 12 10:53:34.937902 2025] [:error] [pid 60095:tid 60103] [client 64.227.32.66:33162] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/v2/_catalog"] [unique_id "aRP2rnlw2elroagFF1qxAwAAAEQ"]
[Wed Nov 12 10:53:35.663736 2025] [:error] [pid 60405:tid 60427] [client 64.227.32.66:51134] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRP2r3MGv_mlVi6mf5pcogAAABM"]
[Wed Nov 12 10:53:36.391312 2025] [:error] [pid 60096:tid 60157] [client 64.227.32.66:51150] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/server-status"] [unique_id "aRP2sDmzkhCvvk8DXOwXvQAAAJc"]
[Wed Nov 12 10:53:37.117645 2025] [:error] [pid 60096:tid 60136] [client 64.227.32.66:51152] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/login.action"] [unique_id "aRP2sTmzkhCvvk8DXOwXwAAAAIo"]
[Wed Nov 12 10:53:37.861501 2025] [:error] [pid 60405:tid 60429] [client 64.227.32.66:51164] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/_all_dbs"] [unique_id "aRP2sXMGv_mlVi6mf5pcpQAAABU"]
[Wed Nov 12 10:53:38.631111 2025] [:error] [pid 60180:tid 60198] [client 64.227.32.66:51170] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/.DS_Store"] [unique_id "aRP2slhgd7ccS8EZg1qrAQAAAVA"]
[Wed Nov 12 10:53:39.364536 2025] [:error] [pid 60405:tid 60412] [client 64.227.32.66:51186] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aRP2s3MGv_mlVi6mf5pcqwAAAAQ"]
[Wed Nov 12 10:53:40.093376 2025] [:error] [pid 60097:tid 60166] [client 64.227.32.66:51198] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRP2tMdT5oio_TbWpi_tCwAAAM0"]
[Wed Nov 12 10:53:40.835794 2025] [:error] [pid 60096:tid 60130] [client 64.227.32.66:51206] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRP2tDmzkhCvvk8DXOwXygAAAIQ"]
[Wed Nov 12 10:53:41.600849 2025] [:error] [pid 60096:tid 60136] [client 64.227.32.66:51208] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/config.json"] [unique_id "aRP2tTmzkhCvvk8DXOwXzQAAAIo"]
[Wed Nov 12 10:53:42.346259 2025] [:error] [pid 60405:tid 60413] [client 64.227.32.66:51218] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/telescope/requests"] [unique_id "aRP2tnMGv_mlVi6mf5pctAAAAAU"]
[Wed Nov 12 10:53:43.074424 2025] [:error] [pid 60097:tid 60171] [client 64.227.32.66:51232] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/info.php"] [unique_id "aRP2t8dT5oio_TbWpi_tEwAAANI"]
[Wed Nov 12 10:53:43.801468 2025] [:error] [pid 60180:tid 60186] [client 64.227.32.66:51240] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRP2t1hgd7ccS8EZg1qrBgAAAUQ"]
[Wed Nov 12 12:26:08.231465 2025] [:error] [pid 60095:tid 60111] [client 106.200.18.66:8262] [client 106.200.18.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.18.66, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aRQMYHlw2elroagFF1rMqQAAAEw"]
[Wed Nov 12 12:26:08.243390 2025] [:error] [pid 60095:tid 60111] [client 106.200.18.66:8262] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 12 15:15:22.259865 2025] [:error] [pid 12744:tid 12769] [client 107.189.5.134:12931] [client 107.189.5.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.5.134, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRQ0Cp1cp_ouUvkFj0UF8gAAARU"]
[Wed Nov 12 15:15:22.269380 2025] [:error] [pid 12744:tid 12769] [client 107.189.5.134:12931] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 15:41:42.394072 2025] [:error] [pid 60405:tid 60420] [client 222.254.214.162:58288] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Wed Nov 12 17:57:29.816884 2025] [:error] [pid 12744:tid 12752] [client 154.53.34.119:40164] [client 154.53.34.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.53.34.119, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRRaCZ1cp_ouUvkFj0VJEwAAAQQ"]
[Wed Nov 12 17:57:29.823729 2025] [:error] [pid 12744:tid 12752] [client 154.53.34.119:40164] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 17:57:31.101628 2025] [:error] [pid 23737:tid 23760] [client 154.53.34.119:40276] [client 154.53.34.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.53.34.119, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRRaCxQUsVVfOZWgW_WOtAAAAYs"]
[Wed Nov 12 17:57:31.109824 2025] [:error] [pid 23737:tid 23760] [client 154.53.34.119:40276] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 18:38:33.579095 2025] [:error] [pid 60095:tid 60099] [client 198.98.55.213:39288] [client 198.98.55.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.55.213, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRRjqXlw2elroagFF1owkQAAAEA"], referer: https://www.bing.com/
[Wed Nov 12 18:38:33.583485 2025] [:error] [pid 60095:tid 60099] [client 198.98.55.213:39288] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.bing.com/
[Wed Nov 12 19:41:00.953961 2025] [:error] [pid 60405:tid 60426] [client 4.233.19.146:5505] [client 4.233.19.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.146, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRRyTHMGv_mlVi6mf5oKhwAAABI"]
[Wed Nov 12 19:41:00.992414 2025] [:error] [pid 60405:tid 60426] [client 4.233.19.146:5505] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 19:41:04.027292 2025] [:error] [pid 60096:tid 60141] [client 4.233.19.146:5534] [client 4.233.19.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.146, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRRyUDmzkhCvvk8DXOyr9AAAAI4"]
[Wed Nov 12 19:41:04.034365 2025] [:error] [pid 60096:tid 60141] [client 4.233.19.146:5534] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 19:50:13.573206 2025] [:error] [pid 23737:tid 23756] [client 147.182.149.75:41010] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.jandakotpilotshop.com"] [uri "/v2/api-docs"] [unique_id "aRR0dRQUsVVfOZWgW_W4ogAAAYc"]
[Wed Nov 12 19:50:14.184733 2025] [:error] [pid 23737:tid 23750] [client 147.182.149.75:41014] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.jandakotpilotshop.com"] [uri "/v3/api-docs"] [unique_id "aRR0dhQUsVVfOZWgW_W4pAAAAYE"]
[Wed Nov 12 19:50:14.795663 2025] [:error] [pid 60095:tid 60119] [client 147.182.149.75:41016] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.jandakotpilotshop.com"] [uri "/api-docs/swagger.json"] [unique_id "aRR0dnlw2elroagFF1o_CQAAAFQ"]
[Wed Nov 12 19:50:15.407862 2025] [:error] [pid 60097:tid 60164] [client 147.182.149.75:41020] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.jandakotpilotshop.com"] [uri "/api/swagger.json"] [unique_id "aRR0d8dT5oio_TbWpi-INAAAAMs"]
[Wed Nov 12 19:50:16.046445 2025] [:error] [pid 12744:tid 12753] [client 147.182.149.75:41036] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/@vite/env"] [unique_id "aRR0eJ1cp_ouUvkFj0VqXwAAAQU"]
[Wed Nov 12 19:50:16.657659 2025] [:error] [pid 12744:tid 12764] [client 147.182.149.75:41040] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/actuator/env"] [unique_id "aRR0eJ1cp_ouUvkFj0VqYAAAARA"]
[Wed Nov 12 19:50:17.269272 2025] [:error] [pid 12744:tid 12748] [client 147.182.149.75:41050] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/server"] [unique_id "aRR0eZ1cp_ouUvkFj0VqYQAAAQA"]
[Wed Nov 12 19:50:17.881212 2025] [:error] [pid 60405:tid 60412] [client 147.182.149.75:41060] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/.vscode/sftp.json"] [unique_id "aRR0eXMGv_mlVi6mf5oL9AAAAAQ"]
[Wed Nov 12 19:50:18.493436 2025] [:error] [pid 60096:tid 60135] [client 147.182.149.75:41068] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/about"] [unique_id "aRR0ejmzkhCvvk8DXOytlQAAAIk"]
[Wed Nov 12 19:50:19.105362 2025] [:error] [pid 12744:tid 12767] [client 147.182.149.75:54252] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/debug/default/view"] [unique_id "aRR0e51cp_ouUvkFj0VqYwAAARM"]
[Wed Nov 12 19:50:19.717403 2025] [:error] [pid 60097:tid 60166] [client 147.182.149.75:54258] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/v2/_catalog"] [unique_id "aRR0e8dT5oio_TbWpi-INQAAAM0"]
[Wed Nov 12 19:50:20.331132 2025] [:error] [pid 60096:tid 60132] [client 147.182.149.75:54272] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRR0fDmzkhCvvk8DXOytlgAAAIY"]
[Wed Nov 12 19:50:20.943981 2025] [:error] [pid 60097:tid 60165] [client 147.182.149.75:54284] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/server-status"] [unique_id "aRR0fMdT5oio_TbWpi-INgAAAMw"]
[Wed Nov 12 19:50:21.556125 2025] [:error] [pid 60097:tid 60170] [client 147.182.149.75:54286] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/login.action"] [unique_id "aRR0fcdT5oio_TbWpi-INwAAANE"]
[Wed Nov 12 19:50:22.172192 2025] [:error] [pid 60097:tid 60169] [client 147.182.149.75:54302] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.jandakotpilotshop.com"] [uri "/_all_dbs"] [unique_id "aRR0fsdT5oio_TbWpi-IOQAAANA"]
[Wed Nov 12 19:50:22.799521 2025] [:error] [pid 60095:tid 60112] [client 147.182.149.75:54308] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/.DS_Store"] [unique_id "aRR0fnlw2elroagFF1o_EAAAAE0"]
[Wed Nov 12 19:50:23.411853 2025] [:error] [pid 60096:tid 60129] [client 147.182.149.75:54316] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.env"] [unique_id "aRR0fzmzkhCvvk8DXOytmwAAAIM"]
[Wed Nov 12 19:50:24.023627 2025] [:error] [pid 23737:tid 23759] [client 147.182.149.75:54332] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRR0gBQUsVVfOZWgW_W4pwAAAYo"]
[Wed Nov 12 19:50:24.636942 2025] [:error] [pid 60096:tid 60148] [client 147.182.149.75:54334] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRR0gDmzkhCvvk8DXOytnAAAAJI"]
[Wed Nov 12 19:50:25.248700 2025] [:error] [pid 23737:tid 23762] [client 147.182.149.75:54342] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/config.json"] [unique_id "aRR0gRQUsVVfOZWgW_W4qQAAAY0"]
[Wed Nov 12 19:50:25.860794 2025] [:error] [pid 23737:tid 23751] [client 147.182.149.75:54356] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/telescope/requests"] [unique_id "aRR0gRQUsVVfOZWgW_W4qwAAAYI"]
[Wed Nov 12 19:50:26.472738 2025] [:error] [pid 60096:tid 60137] [client 147.182.149.75:54360] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/info.php"] [unique_id "aRR0gjmzkhCvvk8DXOytnQAAAIs"]
[Wed Nov 12 19:50:27.089915 2025] [:error] [pid 60405:tid 60429] [client 147.182.149.75:54366] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRR0g3MGv_mlVi6mf5oL-AAAABU"]
[Wed Nov 12 20:46:49.668948 2025] [:error] [pid 23737:tid 23752] [client 82.165.89.182:51376] [client 82.165.89.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.89.182, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRSBuRQUsVVfOZWgW_XJ2QAAAYM"]
[Wed Nov 12 20:46:49.672743 2025] [:error] [pid 23737:tid 23752] [client 82.165.89.182:51376] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 20:46:50.713703 2025] [:error] [pid 60097:tid 60165] [client 82.165.89.182:51384] [client 82.165.89.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.89.182, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRSBusdT5oio_TbWpi-SwAAAAMw"]
[Wed Nov 12 20:46:50.720808 2025] [:error] [pid 60097:tid 60165] [client 82.165.89.182:51384] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 21:43:02.791460 2025] [:error] [pid 60096:tid 60134] [client 154.53.34.119:44122] [client 154.53.34.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.53.34.119, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRSO5jmzkhCvvk8DXOzEbQAAAIg"]
[Wed Nov 12 21:43:02.795168 2025] [:error] [pid 60096:tid 60134] [client 154.53.34.119:44122] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 21:43:03.615774 2025] [:error] [pid 60180:tid 60191] [client 154.53.34.119:44218] [client 154.53.34.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.53.34.119, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRSO51hgd7ccS8EZg1poTAAAAUk"]
[Wed Nov 12 21:43:03.621873 2025] [:error] [pid 60180:tid 60191] [client 154.53.34.119:44218] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 23:45:13.241152 2025] [:error] [pid 60095:tid 60105] [client 222.253.48.28:58876] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRSriXlw2elroagFF1pnxgAAAEY"]
[Wed Nov 12 23:45:13.244731 2025] [:error] [pid 60095:tid 60105] [client 222.253.48.28:58876] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 23:45:14.926962 2025] [:error] [pid 60095:tid 60116] [client 222.253.48.28:58880] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRSrinlw2elroagFF1pnxwAAAFE"]
[Wed Nov 12 23:45:14.933490 2025] [:error] [pid 60095:tid 60116] [client 222.253.48.28:58880] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 02:27:59.349443 2025] [:error] [pid 60096:tid 60141] [client 45.61.186.220:34037] [client 45.61.186.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.186.220, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRTRrzmzkhCvvk8DXOz1xAAAAI4"], referer: https://www.bing.com/
[Thu Nov 13 02:27:59.353321 2025] [:error] [pid 60096:tid 60141] [client 45.61.186.220:34037] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.bing.com/
[Thu Nov 13 04:14:16.064174 2025] [:error] [pid 51491:tid 51499] [client 45.61.188.132:46585] [client 45.61.188.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.132, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRTqmNQaME15TQuGVKThnAAAAMM"]
[Thu Nov 13 04:14:16.069426 2025] [:error] [pid 51491:tid 51499] [client 45.61.188.132:46585] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 05:03:30.380424 2025] [:error] [pid 18960:tid 18963] [client 122.161.67.84:14513] [client 122.161.67.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.67.84, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aRT2IovOP-uT_KFAcQNxBwAAAQE"]
[Thu Nov 13 05:03:30.385132 2025] [:error] [pid 18960:tid 18963] [client 122.161.67.84:14513] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Nov 13 08:22:40.023375 2025] [:error] [pid 22222:tid 22234] [client 182.42.105.144:54034] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRUk0DL-5qXvQuZkA4HOBwAAAAg"]
[Thu Nov 13 13:53:44.282877 2025] [:error] [pid 62303:tid 62315] [client 107.189.14.134:42097] [client 107.189.14.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.14.134, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRVyaL-hlFTtVrZw8jCStgAAAIg"], referer: https://www.bing.com/
[Thu Nov 13 13:53:44.289228 2025] [:error] [pid 62303:tid 62315] [client 107.189.14.134:42097] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.bing.com/
[Thu Nov 13 14:12:24.003679 2025] [:error] [pid 6086:tid 6094] [client 142.248.80.2:62748] [client 142.248.80.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aRV2yH9_6CRZzjZnAe3V3AAAAQU"]
[Thu Nov 13 14:12:25.128864 2025] [:error] [pid 62215:tid 62242] [client 142.248.80.2:61574] [client 142.248.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/public/vendor/laravel-filemanager/js/script.js"] [unique_id "aRV2yUvClof1c6XaOBVakQAAANc"]
[Thu Nov 13 14:12:25.858337 2025] [:error] [pid 62216:tid 62258] [client 142.248.80.2:61598] [client 142.248.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRV2yepyFB9M2aVQhwP1awAAAAs"]
[Thu Nov 13 14:12:26.588265 2025] [:error] [pid 6086:tid 6092] [client 142.248.80.2:61604] [client 142.248.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/_ignition/execute-solution"] [unique_id "aRV2yn9_6CRZzjZnAe3V5QAAAQM"]
[Thu Nov 13 14:12:27.317424 2025] [:error] [pid 62215:tid 62243] [client 142.248.80.2:61628] [client 142.248.80.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRV2y0vClof1c6XaOBValgAAANg"]
[Thu Nov 13 14:36:56.231268 2025] [:error] [pid 62215:tid 62241] [client 180.102.134.69:51547] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRV8iEvClof1c6XaOBVlxAAAANY"]
[Thu Nov 13 18:27:28.108234 2025] [:error] [pid 44354:tid 44376] [client 107.189.1.5:57190] [client 107.189.1.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.1.5, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRWykHqKopQhy3G4s3l_CgAAAZE"], referer: https://www.yahoo.com/
[Thu Nov 13 18:27:28.114186 2025] [:error] [pid 44354:tid 44376] [client 107.189.1.5:57190] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Thu Nov 13 18:56:40.793012 2025] [:error] [pid 6086:tid 6104] [client 162.240.147.230:56942] [client 162.240.147.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.147.230, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRW5aH9_6CRZzjZnAe1B6gAAAQ8"]
[Thu Nov 13 18:56:40.796458 2025] [:error] [pid 6086:tid 6104] [client 162.240.147.230:56942] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 18:56:41.782754 2025] [:error] [pid 44245:tid 44270] [client 162.240.147.230:53444] [client 162.240.147.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.147.230, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRW5aYk7r-HKZdqw-dXc-gAAAVM"]
[Thu Nov 13 18:56:41.789197 2025] [:error] [pid 44245:tid 44270] [client 162.240.147.230:53444] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 20:05:33.847430 2025] [:error] [pid 62303:tid 62322] [client 104.248.12.193:56348] [client 104.248.12.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.12.193, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRXJjb-hlFTtVrZw8jAC_gAAAI8"]
[Thu Nov 13 20:05:33.851337 2025] [:error] [pid 62303:tid 62322] [client 104.248.12.193:56348] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 20:05:35.646683 2025] [:error] [pid 62215:tid 62225] [client 104.248.12.193:56364] [client 104.248.12.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.12.193, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRXJj0vClof1c6XaOBXdIQAAAMY"]
[Thu Nov 13 20:05:35.653203 2025] [:error] [pid 62215:tid 62225] [client 104.248.12.193:56364] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 20:52:46.259042 2025] [:error] [pid 62215:tid 62226] [client 121.229.185.160:42629] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRXUnkvClof1c6XaOBXtMQAAAMc"]
[Thu Nov 13 23:12:02.643074 2025] [:error] [pid 5086:tid 5092] [client 85.128.143.144:53184] [client 85.128.143.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.128.143.144, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRX1Qh_dsYLFCHw574jGaQAAAQM"]
[Thu Nov 13 23:12:02.647641 2025] [:error] [pid 5086:tid 5092] [client 85.128.143.144:53184] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 03:24:39.486585 2025] [:error] [pid 56495:tid 56499] [client 114.96.103.33:34636] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRYwd1wO8wZZL5WJceXwbgAAAMA"]
[Fri Nov 14 04:08:14.489012 2025] [:error] [pid 29213:tid 29238] [client 107.189.30.207:20294] [client 107.189.30.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.30.207, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRY6rq-KarYJSZLw9BM9tAAAANY"], referer: https://www.bing.com/
[Fri Nov 14 04:08:14.494130 2025] [:error] [pid 29213:tid 29238] [client 107.189.30.207:20294] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.bing.com/
[Fri Nov 14 07:17:47.536466 2025] [:error] [pid 59105:tid 59112] [client 205.185.120.118:13712] [client 205.185.120.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.120.118, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRZnG7d-anP1JpNfuSKOIQAAAUU"]
[Fri Nov 14 07:17:47.540439 2025] [:error] [pid 59105:tid 59112] [client 205.185.120.118:13712] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 09:20:25.317800 2025] [:error] [pid 59105:tid 59116] [client 116.118.84.119:35872] [client 116.118.84.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.118.84.119, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRaD2bd-anP1JpNfuSK7-AAAAUk"]
[Fri Nov 14 09:20:25.321905 2025] [:error] [pid 59105:tid 59116] [client 116.118.84.119:35872] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 09:20:25.854674 2025] [:error] [pid 47242:tid 47253] [client 116.118.84.119:35888] [client 116.118.84.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.118.84.119, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRaD2VPNnvrux3OMagzUbQAAAMg"]
[Fri Nov 14 09:20:25.864327 2025] [:error] [pid 47242:tid 47253] [client 116.118.84.119:35888] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 09:32:23.328347 2025] [:error] [pid 47630:tid 47654] [client 60.188.57.0:44791] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRaGp8xXXNBfWgpfVJ6FhwAAARY"]
[Fri Nov 14 10:38:31.060874 2025] [:error] [pid 47155:tid 47191] [client 159.65.18.197:60932] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v2/api-docs"] [unique_id "aRaWJ5ipxRXMZJH8hmhWCgAAAEU"]
[Fri Nov 14 10:38:31.791951 2025] [:error] [pid 47156:tid 47226] [client 159.65.18.197:60944] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v3/api-docs"] [unique_id "aRaWJ9jrQX_P-kC7M_5-7gAAAIw"]
[Fri Nov 14 10:38:32.525424 2025] [:error] [pid 59105:tid 59110] [client 159.65.18.197:60960] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/api-docs/swagger.json"] [unique_id "aRaWKLd-anP1JpNfuSLhDgAAAUM"]
[Fri Nov 14 10:38:33.259348 2025] [:error] [pid 47156:tid 47236] [client 159.65.18.197:60970] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/api/swagger.json"] [unique_id "aRaWKdjrQX_P-kC7M_5-8wAAAJU"]
[Fri Nov 14 10:38:33.990384 2025] [:error] [pid 47155:tid 47200] [client 159.65.18.197:60980] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/@vite/env"] [unique_id "aRaWKZipxRXMZJH8hmhWDAAAAE4"]
[Fri Nov 14 10:38:34.721733 2025] [:error] [pid 47154:tid 47177] [client 159.65.18.197:60992] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/actuator/env"] [unique_id "aRaWKkijA13A3g3ATrLQMQAAABI"]
[Fri Nov 14 10:38:35.454920 2025] [:error] [pid 47154:tid 47165] [client 159.65.18.197:32768] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/server"] [unique_id "aRaWK0ijA13A3g3ATrLQNAAAAAY"]
[Fri Nov 14 10:38:36.184452 2025] [:error] [pid 47155:tid 47209] [client 159.65.18.197:32784] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.vscode/sftp.json"] [unique_id "aRaWLJipxRXMZJH8hmhWEAAAAFc"]
[Fri Nov 14 10:38:36.913950 2025] [:error] [pid 47630:tid 47636] [client 159.65.18.197:32790] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/about"] [unique_id "aRaWLMxXXNBfWgpfVJ6f8gAAAQQ"]
[Fri Nov 14 10:38:37.645347 2025] [:error] [pid 47156:tid 47229] [client 159.65.18.197:32806] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/debug/default/view"] [unique_id "aRaWLdjrQX_P-kC7M_5_FwAAAI8"]
[Fri Nov 14 10:38:38.372208 2025] [:error] [pid 47156:tid 47220] [client 159.65.18.197:32816] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v2/_catalog"] [unique_id "aRaWLtjrQX_P-kC7M_5_IQAAAIY"]
[Fri Nov 14 10:38:39.102113 2025] [:error] [pid 47630:tid 47644] [client 159.65.18.197:32824] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRaWL8xXXNBfWgpfVJ6f9AAAAQw"]
[Fri Nov 14 10:38:39.831657 2025] [:error] [pid 47155:tid 47204] [client 159.65.18.197:37096] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/server-status"] [unique_id "aRaWL5ipxRXMZJH8hmhWKgAAAFI"]
[Fri Nov 14 10:38:40.561984 2025] [:error] [pid 47154:tid 47168] [client 159.65.18.197:37112] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/login.action"] [unique_id "aRaWMEijA13A3g3ATrLQRwAAAAk"]
[Fri Nov 14 10:38:41.290535 2025] [:error] [pid 47154:tid 47180] [client 159.65.18.197:37120] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/_all_dbs"] [unique_id "aRaWMUijA13A3g3ATrLQSAAAABU"]
[Fri Nov 14 10:38:42.019021 2025] [:error] [pid 47154:tid 47183] [client 159.65.18.197:37122] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.DS_Store"] [unique_id "aRaWMkijA13A3g3ATrLQTAAAABg"]
[Fri Nov 14 10:38:42.748527 2025] [:error] [pid 47242:tid 47261] [client 159.65.18.197:37132] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aRaWMlPNnvrux3OMagzzmwAAANA"]
[Fri Nov 14 10:38:43.476428 2025] [:error] [pid 47630:tid 47633] [client 159.65.18.197:37144] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRaWM8xXXNBfWgpfVJ6gAQAAAQE"]
[Fri Nov 14 10:38:44.205451 2025] [:error] [pid 47630:tid 47655] [client 159.65.18.197:37160] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRaWNMxXXNBfWgpfVJ6gBAAAARc"]
[Fri Nov 14 10:38:45.001290 2025] [:error] [pid 47242:tid 47266] [client 159.65.18.197:37172] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/config.json"] [unique_id "aRaWNFPNnvrux3OMagzzoQAAANU"]
[Fri Nov 14 10:38:45.769510 2025] [:error] [pid 47156:tid 47228] [client 159.65.18.197:37182] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/telescope/requests"] [unique_id "aRaWNdjrQX_P-kC7M_5_KQAAAI4"]
[Fri Nov 14 10:38:46.502846 2025] [:error] [pid 47630:tid 47648] [client 159.65.18.197:37194] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/info.php"] [unique_id "aRaWNsxXXNBfWgpfVJ6gBwAAARA"]
[Fri Nov 14 10:38:47.232546 2025] [:error] [pid 47155:tid 47195] [client 159.65.18.197:37198] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRaWN5ipxRXMZJH8hmhWMAAAAEk"]
[Fri Nov 14 13:45:55.363971 2025] [:error] [pid 16575:tid 16639] [client 145.239.10.137:44783] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php, referer: http://jandakotpilotshop.com/system.php
[Fri Nov 14 14:50:17.782367 2025] [:error] [pid 16671:tid 16690] [client 45.61.149.134:5790] [client 45.61.149.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.149.134, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRbRKTsoHwEAmeIzZXANVwAAAQ0"], referer: https://www.google.com/
[Fri Nov 14 14:50:17.788896 2025] [:error] [pid 16671:tid 16690] [client 45.61.149.134:5790] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Fri Nov 14 15:05:40.151784 2025] [:error] [pid 16671:tid 16687] [client 205.185.114.63:62219] [client 205.185.114.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.114.63, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRbUxDsoHwEAmeIzZXATQgAAAQo"]
[Fri Nov 14 15:05:40.155497 2025] [:error] [pid 16671:tid 16687] [client 205.185.114.63:62219] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 15:09:12.572228 2025] [:error] [pid 16574:tid 16613] [client 43.130.111.40:53718] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRbVmP6XQqe4NqaoE9L_SwAAAIY"]
[Fri Nov 14 15:53:13.559065 2025] [:error] [pid 16573:tid 16580] [client 182.42.111.156:56915] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRbf6SPGexfUk9FDoEJv9QAAAEI"]
[Fri Nov 14 20:52:50.746526 2025] [:error] [pid 16573:tid 16587] [client 80.77.123.93:59390] [client 80.77.123.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.77.123.93, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRcmIiPGexfUk9FDoELGIwAAAEk"]
[Fri Nov 14 20:52:50.750290 2025] [:error] [pid 16573:tid 16587] [client 80.77.123.93:59390] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 20:52:51.806955 2025] [:error] [pid 16573:tid 16579] [client 80.77.123.93:59402] [client 80.77.123.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.77.123.93, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRcmIyPGexfUk9FDoELGJgAAAEE"]
[Fri Nov 14 20:52:51.814479 2025] [:error] [pid 16573:tid 16579] [client 80.77.123.93:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 00:13:46.174981 2025] [:error] [pid 45908:tid 45959] [client 205.185.114.63:64568] [client 205.185.114.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.114.63, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRdVOmWG19mWwZX7KatJgQAAABU"]
[Sat Nov 15 00:13:46.179260 2025] [:error] [pid 45908:tid 45959] [client 205.185.114.63:64568] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 06:08:47.395494 2025] [:error] [pid 27911:tid 27985] [client 43.135.145.117:39996] [client 43.135.145.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aReob8GzUdrhGBIfiKTJdAAAAJE"]
[Sat Nov 15 08:41:42.354148 2025] [:error] [pid 27909:tid 27936] [client 217.160.134.4:36456] [client 217.160.134.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.134.4, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRfMRiTfZ6B57n8HepXBzQAAABc"]
[Sat Nov 15 08:41:42.359805 2025] [:error] [pid 27909:tid 27936] [client 217.160.134.4:36456] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 08:41:43.369583 2025] [:error] [pid 27910:tid 27944] [client 217.160.134.4:38746] [client 217.160.134.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.134.4, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRfMR46e1LusHMYkS7aLAQAAAEM"]
[Sat Nov 15 08:41:43.375835 2025] [:error] [pid 27910:tid 27944] [client 217.160.134.4:38746] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 10:44:53.716621 2025] [:error] [pid 27997:tid 27999] [client 107.189.12.15:19145] [client 107.189.12.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.12.15, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRfpJdpja_6cDxKbxFl-qQAAAMA"], referer: https://www.yahoo.com/
[Sat Nov 15 10:44:53.721043 2025] [:error] [pid 27997:tid 27999] [client 107.189.12.15:19145] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Sat Nov 15 10:52:10.423519 2025] [:error] [pid 20346:tid 20357] [client 49.7.227.204:59394] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRfq2p7hsydZdIoVTlu6lAAAAwg"]
[Sat Nov 15 12:09:26.404950 2025] [:error] [pid 20654:tid 20672] [client 138.197.23.42:64642] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRf89ncS7eC8vO76_ydtdwAAA48"]
[Sat Nov 15 12:09:26.829397 2025] [:error] [pid 27909:tid 27919] [client 138.197.23.42:64794] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRf89iTfZ6B57n8HepXtMQAAAAY"]
[Sat Nov 15 12:09:27.244371 2025] [:error] [pid 22765:tid 22778] [client 138.197.23.42:64946] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRf896brQzjuZmPIWDafHgAAAog"]
[Sat Nov 15 12:09:27.660718 2025] [:error] [pid 27911:tid 27986] [client 138.197.23.42:65114] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRf898GzUdrhGBIfiKQmJQAAAJI"]
[Sat Nov 15 12:09:28.081011 2025] [:error] [pid 27911:tid 27986] [client 138.197.23.42:65273] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRf8-MGzUdrhGBIfiKQmNwAAAJI"]
[Sat Nov 15 13:09:08.384948 2025] [:error] [pid 20654:tid 20667] [client 45.61.157.120:47063] [client 45.61.157.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.157.120, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRgK9HcS7eC8vO76_yeBjgAAA4o"], referer: https://www.google.com/
[Sat Nov 15 13:09:08.389623 2025] [:error] [pid 20654:tid 20667] [client 45.61.157.120:47063] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Sat Nov 15 14:01:22.353848 2025] [:error] [pid 20313:tid 20338] [client 107.189.12.15:35555] [client 107.189.12.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.12.15, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRgXMhI9DXIgPadBLUZjlAAAAtY"], referer: https://duckduckgo.com/
[Sat Nov 15 14:01:22.358833 2025] [:error] [pid 20313:tid 20338] [client 107.189.12.15:35555] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Sat Nov 15 17:14:28.608569 2025] [:error] [pid 20654:tid 20668] [client 103.200.22.140:42206] [client 103.200.22.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.22.140, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRhEdHcS7eC8vO76_yfQcAAAA4s"]
[Sat Nov 15 17:14:28.612149 2025] [:error] [pid 20654:tid 20668] [client 103.200.22.140:42206] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 17:14:29.299026 2025] [:error] [pid 19959:tid 19987] [client 103.200.22.140:53878] [client 103.200.22.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.22.140, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRhEdcjejiTUP1-IawPF0gAAAZU"]
[Sat Nov 15 17:14:29.309617 2025] [:error] [pid 19959:tid 19987] [client 103.200.22.140:53878] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 17:20:01.843882 2025] [:error] [pid 20654:tid 20671] [client 60.188.57.0:49860] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRhFwXcS7eC8vO76_yfSPAAAA44"]
[Sat Nov 15 19:03:28.720803 2025] [:error] [pid 20346:tid 20368] [client 192.200.210.52:38757] [client 192.200.210.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aRheAJ7hsydZdIoVTls9mAAAAxM"]
[Sat Nov 15 20:26:27.037951 2025] [:error] [pid 22613:tid 22617] [client 45.134.79.103:63704] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRhxcyoyR3cDsIRGPRnSQgAAAgI"]
[Sat Nov 15 20:26:27.690817 2025] [:error] [pid 27909:tid 27915] [client 45.134.79.103:63974] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRhxcyTfZ6B57n8HepU9mAAAAAI"]
[Sat Nov 15 20:26:28.329402 2025] [:error] [pid 20654:tid 20662] [client 45.134.79.103:64186] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdHcS7eC8vO76_ycI9gAAA4U"]
[Sat Nov 15 21:23:51.757836 2025] [:error] [pid 20654:tid 20670] [client 49.51.233.95:33692] [client 49.51.233.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRh-53cS7eC8vO76_ycW8AAAA40"]
[Sun Nov 16 05:05:51.917365 2025] [:error] [pid 20556:tid 20582] [client 34.136.38.62:50570] [client 34.136.38.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRjrL0kbyEckbWtBcCKHbQAAARg"]
[Sun Nov 16 06:26:54.037911 2025] [:error] [pid 20556:tid 20572] [client 175.6.217.4:54411] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRj-LkkbyEckbWtBcCKk1QAAAQ4"]
[Sun Nov 16 09:40:25.336818 2025] [:error] [pid 52469:tid 52489] [client 165.101.132.78:63671] [client 165.101.132.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.101.132.78, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aRkriU6HaXpHeEZ98Z0-OwAAAAw"]
[Sun Nov 16 09:40:25.341517 2025] [:error] [pid 52469:tid 52489] [client 165.101.132.78:63671] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Nov 16 10:48:30.407314 2025] [:error] [pid 20556:tid 20570] [client 157.245.36.108:47500] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v2/api-docs"] [unique_id "aRk7fkkbyEckbWtBcCIBugAAAQw"]
[Sun Nov 16 10:48:31.141900 2025] [:error] [pid 20556:tid 20581] [client 157.245.36.108:47502] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v3/api-docs"] [unique_id "aRk7f0kbyEckbWtBcCIBvAAAARc"]
[Sun Nov 16 10:48:31.899414 2025] [:error] [pid 52470:tid 52510] [client 157.245.36.108:47516] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/api-docs/swagger.json"] [unique_id "aRk7f0g9mXF2ZFFtj1UT7AAAAEU"]
[Sun Nov 16 10:48:32.628946 2025] [:error] [pid 52563:tid 52585] [client 157.245.36.108:47518] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/api/swagger.json"] [unique_id "aRk7gM-l3ey-hVJ5AutHngAAANM"]
[Sun Nov 16 10:48:33.358993 2025] [:error] [pid 52471:tid 52543] [client 157.245.36.108:47534] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/@vite/env"] [unique_id "aRk7gdmWsFzjR5CEgDXvxAAAAIs"]
[Sun Nov 16 10:48:34.108733 2025] [:error] [pid 20556:tid 20577] [client 157.245.36.108:47544] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/actuator/env"] [unique_id "aRk7gkkbyEckbWtBcCIBvwAAARM"]
[Sun Nov 16 10:48:34.846161 2025] [:error] [pid 52470:tid 52518] [client 157.245.36.108:47548] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/server"] [unique_id "aRk7gkg9mXF2ZFFtj1UT8QAAAE0"]
[Sun Nov 16 10:48:35.575755 2025] [:error] [pid 52469:tid 52493] [client 157.245.36.108:47554] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.vscode/sftp.json"] [unique_id "aRk7g06HaXpHeEZ98Z1NZQAAABA"]
[Sun Nov 16 10:48:36.304181 2025] [:error] [pid 52563:tid 52586] [client 157.245.36.108:52182] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/about"] [unique_id "aRk7hM-l3ey-hVJ5AutHoQAAANQ"]
[Sun Nov 16 10:48:37.038862 2025] [:error] [pid 52471:tid 52551] [client 157.245.36.108:52190] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/debug/default/view"] [unique_id "aRk7hdmWsFzjR5CEgDXvxwAAAJM"]
[Sun Nov 16 10:48:37.769746 2025] [:error] [pid 52471:tid 52556] [client 157.245.36.108:52202] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v2/_catalog"] [unique_id "aRk7hdmWsFzjR5CEgDXvyQAAAJg"]
[Sun Nov 16 10:48:38.495582 2025] [:error] [pid 52471:tid 52532] [client 157.245.36.108:52214] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRk7htmWsFzjR5CEgDXvywAAAIA"]
[Sun Nov 16 10:48:39.220596 2025] [:error] [pid 52563:tid 52585] [client 157.245.36.108:52228] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/server-status"] [unique_id "aRk7h8-l3ey-hVJ5AutHowAAANM"]
[Sun Nov 16 10:48:40.007949 2025] [:error] [pid 20556:tid 20565] [client 157.245.36.108:52236] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/login.action"] [unique_id "aRk7iEkbyEckbWtBcCIBygAAAQc"]
[Sun Nov 16 10:48:40.738634 2025] [:error] [pid 52471:tid 52544] [client 157.245.36.108:52246] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/_all_dbs"] [unique_id "aRk7iNmWsFzjR5CEgDXvzgAAAIw"]
[Sun Nov 16 10:48:41.469203 2025] [:error] [pid 52471:tid 52545] [client 157.245.36.108:52256] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.DS_Store"] [unique_id "aRk7idmWsFzjR5CEgDXv0AAAAI0"]
[Sun Nov 16 10:48:42.204304 2025] [:error] [pid 52471:tid 52553] [client 157.245.36.108:52258] [client 157.245.36.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aRk7itmWsFzjR5CEgDXv0QAAAJU"]
[Sun Nov 16 10:48:42.933190 2025] [:error] [pid 52469:tid 52493] [client 157.245.36.108:52274] [client 157.245.36.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRk7ik6HaXpHeEZ98Z1NcgAAABA"]
[Sun Nov 16 10:48:43.663429 2025] [:error] [pid 52470:tid 52523] [client 157.245.36.108:52276] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRk7i0g9mXF2ZFFtj1UT9wAAAFI"]
[Sun Nov 16 10:48:44.391052 2025] [:error] [pid 52563:tid 52584] [client 157.245.36.108:52278] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/config.json"] [unique_id "aRk7jM-l3ey-hVJ5AutHqAAAANI"]
[Sun Nov 16 10:48:45.147716 2025] [:error] [pid 52563:tid 52570] [client 157.245.36.108:52284] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/telescope/requests"] [unique_id "aRk7jc-l3ey-hVJ5AutHqQAAAMQ"]
[Sun Nov 16 10:48:45.880869 2025] [:error] [pid 52471:tid 52550] [client 157.245.36.108:50990] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/info.php"] [unique_id "aRk7jdmWsFzjR5CEgDXv1QAAAJI"]
[Sun Nov 16 10:48:46.613344 2025] [:error] [pid 52471:tid 52551] [client 157.245.36.108:50994] [client 157.245.36.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRk7jtmWsFzjR5CEgDXv1gAAAJM"]
[Sun Nov 16 14:04:03.459306 2025] [:error] [pid 52469:tid 52501] [client 170.106.84.136:36936] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRlpU06HaXpHeEZ98Z2D8AAAABg"]
[Sun Nov 16 14:31:08.034652 2025] [:error] [pid 34301:tid 34316] [client 43.128.67.187:58142] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRlvrLGPoZwUGuFNREuejgAAAow"]
[Sun Nov 16 18:49:46.365677 2025] [:error] [pid 52471:tid 52543] [client 155.94.163.116:63952] [client 155.94.163.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/"] [unique_id "aRmsStmWsFzjR5CEgDVZhgAAAIs"], referer: binance.com
[Sun Nov 16 18:49:51.626645 2025] [:error] [pid 34164:tid 34185] [client 155.94.163.116:64622] [client 155.94.163.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/files/"] [unique_id "aRmsT-93ccBCLD8-Q4ZUtwAAAZE"], referer: binance.com
[Sun Nov 16 19:21:03.243460 2025] [:error] [pid 52469:tid 52479] [client 114.96.103.33:37138] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRmzn06HaXpHeEZ98Z3rzQAAAAI"]
[Sun Nov 16 21:52:50.594477 2025] [:error] [pid 52563:tid 52586] [client 101.32.52.164:41438] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRnXMs-l3ey-hVJ5AuvU7wAAANQ"]
[Mon Nov 17 05:27:15.461313 2025] [:error] [pid 39537:tid 39561] [client 172.192.58.120:18935] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Mon Nov 17 05:27:15.594465 2025] [:error] [pid 39537:tid 39562] [client 172.192.58.120:18935] File does not exist: /usr/local/apache/htdocs/suspended-page/CLA.php
[Mon Nov 17 05:27:15.711560 2025] [:error] [pid 39537:tid 39543] [client 172.192.58.120:18935] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Mon Nov 17 05:27:15.828894 2025] [:error] [pid 39537:tid 39563] [client 172.192.58.120:18935] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon Nov 17 05:27:15.947423 2025] [:error] [pid 39537:tid 39558] [client 172.192.58.120:18935] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Nov 17 05:27:16.067356 2025] [:error] [pid 39537:tid 39546] [client 172.192.58.120:18935] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Nov 17 05:27:16.305408 2025] [:error] [pid 39537:tid 39548] [client 172.192.58.120:18935] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Mon Nov 17 05:27:16.438362 2025] [:error] [pid 39537:tid 39545] [client 172.192.58.120:18935] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Mon Nov 17 05:27:16.556547 2025] [:error] [pid 39537:tid 39553] [client 172.192.58.120:18935] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Nov 17 05:27:17.059302 2025] [:error] [pid 39537:tid 39554] [client 172.192.58.120:18935] File does not exist: /usr/local/apache/htdocs/suspended-page/astab.php
[Mon Nov 17 05:27:18.465837 2025] [:error] [pid 39537:tid 39554] [client 172.192.58.120:18935] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/atomlib.php"] [unique_id "aRpBtoZRrh1pcrdcLB_YhAAAAM4"]
[Mon Nov 17 05:27:22.837166 2025] [:error] [pid 40548:tid 40566] [client 172.192.58.120:19121] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/atomlib.php"] [unique_id "aRpBugM_PykfYnxh-j-rQAAAARA"]
[Mon Nov 17 05:27:23.922321 2025] [:error] [pid 39450:tid 39488] [client 172.192.58.120:18943] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/atomlib.php"] [unique_id "aRpBu-oZqPB4_7vNEDSTVwAAAEc"]
[Mon Nov 17 05:27:26.697590 2025] [:error] [pid 39451:tid 39516] [client 172.192.58.120:18942] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/atomlib.php"] [unique_id "aRpBvufgkqXTS0SO3fBnGwAAAIg"]
[Mon Nov 17 05:27:27.847478 2025] [:error] [pid 39449:tid 39465] [client 172.192.58.120:19421] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bless.php"] [unique_id "aRpBv6UCymTA3MDfzLOLPwAAAAs"]
[Mon Nov 17 05:27:28.973035 2025] [:error] [pid 39450:tid 39504] [client 172.192.58.120:19077] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bless.php"] [unique_id "aRpBwOoZqPB4_7vNEDSTXwAAAFc"]
[Mon Nov 17 05:27:30.633794 2025] [:error] [pid 40548:tid 40574] [client 172.192.58.120:19105] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bless.php"] [unique_id "aRpBwgM_PykfYnxh-j-rSAAAARg"]
[Mon Nov 17 05:27:34.684832 2025] [:error] [pid 39537:tid 39558] [client 172.192.58.120:19078] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bless.php"] [unique_id "aRpBxoZRrh1pcrdcLB_YkQAAANI"]
[Mon Nov 17 05:27:39.375311 2025] [:error] [pid 39537:tid 39542] [client 172.192.58.120:19125] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bless2.php"] [unique_id "aRpBy4ZRrh1pcrdcLB_YlwAAAMI"]
[Mon Nov 17 05:27:41.807884 2025] [:error] [pid 39450:tid 39482] [client 172.192.58.120:19429] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bless2.php"] [unique_id "aRpBzeoZqPB4_7vNEDSTZQAAAEE"]
[Mon Nov 17 05:27:44.934518 2025] [:error] [pid 39451:tid 39514] [client 172.192.58.120:18897] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bless2.php"] [unique_id "aRpB0OfgkqXTS0SO3fBnMAAAAIY"]
[Mon Nov 17 05:27:48.130483 2025] [:error] [pid 39537:tid 39543] [client 172.192.58.120:19103] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bless2.php"] [unique_id "aRpB1IZRrh1pcrdcLB_YpQAAAMM"]
[Mon Nov 17 05:27:50.567613 2025] [:error] [pid 40548:tid 40556] [client 172.192.58.120:19106] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bolt.php"] [unique_id "aRpB1gM_PykfYnxh-j-rWwAAAQY"]
[Mon Nov 17 05:27:51.758238 2025] [:error] [pid 40548:tid 40551] [client 172.192.58.120:19429] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bolt.php"] [unique_id "aRpB1wM_PykfYnxh-j-rXAAAAQE"]
[Mon Nov 17 05:27:58.842975 2025] [:error] [pid 39451:tid 39519] [client 172.192.58.120:18922] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bolt.php"] [unique_id "aRpB3ufgkqXTS0SO3fBnOgAAAIs"]
[Mon Nov 17 05:28:02.083750 2025] [:error] [pid 39451:tid 39524] [client 172.192.58.120:19084] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bolt.php"] [unique_id "aRpB4ufgkqXTS0SO3fBnPwAAAJA"]
[Mon Nov 17 05:28:08.342751 2025] [:error] [pid 39449:tid 39478] [client 172.192.58.120:19433] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/build.php"] [unique_id "aRpB6KUCymTA3MDfzLOLTwAAABg"]
[Mon Nov 17 05:28:13.070423 2025] [:error] [pid 39449:tid 39470] [client 172.192.58.120:19394] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/build.php"] [unique_id "aRpB7aUCymTA3MDfzLOLUAAAABA"]
[Mon Nov 17 05:28:15.247903 2025] [:error] [pid 39537:tid 39563] [client 172.192.58.120:18884] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/build.php"] [unique_id "aRpB74ZRrh1pcrdcLB_YzgAAANc"]
[Mon Nov 17 05:28:16.130560 2025] [:error] [pid 39449:tid 39473] [client 172.192.58.120:19120] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/build.php"] [unique_id "aRpB8KUCymTA3MDfzLOLUQAAABM"]
[Mon Nov 17 05:28:20.385873 2025] [:error] [pid 39450:tid 39486] [client 172.192.58.120:19114] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Nov 17 05:28:20.503695 2025] [:error] [pid 39450:tid 39487] [client 172.192.58.120:19114] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Mon Nov 17 05:28:20.829585 2025] [:error] [pid 39450:tid 39488] [client 172.192.58.120:19114] File does not exist: /usr/local/apache/htdocs/suspended-page/cool.php
[Mon Nov 17 05:28:20.976879 2025] [:error] [pid 39450:tid 39505] [client 172.192.58.120:19114] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Mon Nov 17 05:28:21.093451 2025] [:error] [pid 39450:tid 39494] [client 172.192.58.120:19114] File does not exist: /usr/local/apache/htdocs/suspended-page/dejavu.php
[Mon Nov 17 05:28:21.230805 2025] [:error] [pid 39450:tid 39502] [client 172.192.58.120:19114] File does not exist: /usr/local/apache/htdocs/suspended-page/faq.php
[Mon Nov 17 05:28:21.347926 2025] [:error] [pid 39450:tid 39496] [client 172.192.58.120:19114] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Mon Nov 17 05:28:21.465018 2025] [:error] [pid 39450:tid 39491] [client 172.192.58.120:19114] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Nov 17 05:28:21.581820 2025] [:error] [pid 39450:tid 39490] [client 172.192.58.120:19114] File does not exist: /usr/local/apache/htdocs/suspended-page/file17.php
[Mon Nov 17 05:28:21.700182 2025] [:error] [pid 39450:tid 39497] [client 172.192.58.120:19114] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Mon Nov 17 05:28:21.823985 2025] [:error] [pid 39450:tid 39481] [client 172.192.58.120:19114] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Mon Nov 17 05:28:23.287601 2025] [:error] [pid 39450:tid 39481] [client 172.192.58.120:19114] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/file5.php"] [unique_id "aRpB9-oZqPB4_7vNEDSTkgAAAEA"]
[Mon Nov 17 05:28:26.679434 2025] [:error] [pid 39450:tid 39494] [client 172.192.58.120:19076] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/file5.php"] [unique_id "aRpB-uoZqPB4_7vNEDSTlwAAAE0"]
[Mon Nov 17 05:28:30.147326 2025] [:error] [pid 39449:tid 39478] [client 172.192.58.120:19082] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/file5.php"] [unique_id "aRpB_qUCymTA3MDfzLOLYgAAABg"]
[Mon Nov 17 05:28:31.712883 2025] [:error] [pid 39451:tid 39516] [client 172.192.58.120:18886] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/file5.php"] [unique_id "aRpB_-fgkqXTS0SO3fBnUwAAAIg"]
[Mon Nov 17 05:28:34.651240 2025] [:error] [pid 39451:tid 39527] [client 172.192.58.120:18893] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/file7.php"] [unique_id "aRpCAufgkqXTS0SO3fBnVgAAAJM"]
[Mon Nov 17 05:28:37.089619 2025] [:error] [pid 39451:tid 39531] [client 172.192.58.120:18931] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/file7.php"] [unique_id "aRpCBefgkqXTS0SO3fBnWAAAAJc"]
[Mon Nov 17 05:28:45.297101 2025] [:error] [pid 39450:tid 39497] [client 172.192.58.120:19417] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/file7.php"] [unique_id "aRpCDeoZqPB4_7vNEDSTpQAAAFA"]
[Mon Nov 17 05:28:52.629598 2025] [:error] [pid 40548:tid 40571] [client 172.192.58.120:18911] [client 172.192.58.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "jandakotpilotshop.com"] [uri "/fm.php"] [unique_id "aRpCFAM_PykfYnxh-j-rmQAAARU"]
[Mon Nov 17 05:28:56.644802 2025] [:error] [pid 39450:tid 39499] [client 172.192.58.120:18921] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gfile.php"] [unique_id "aRpCGOoZqPB4_7vNEDSTsQAAAFI"]
[Mon Nov 17 05:29:00.894874 2025] [:error] [pid 39451:tid 39521] [client 172.192.58.120:18927] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gfile.php"] [unique_id "aRpCHOfgkqXTS0SO3fBnhQAAAI0"]
[Mon Nov 17 05:29:02.591782 2025] [:error] [pid 39450:tid 39501] [client 172.192.58.120:19414] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gfile.php"] [unique_id "aRpCHuoZqPB4_7vNEDSTtQAAAFQ"]
[Mon Nov 17 05:29:05.140179 2025] [:error] [pid 40548:tid 40558] [client 172.192.58.120:19099] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gfile.php"] [unique_id "aRpCIQM_PykfYnxh-j-rswAAAQg"]
[Mon Nov 17 05:29:06.147326 2025] [:error] [pid 40548:tid 40564] [client 172.192.58.120:19419] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gmo.php"] [unique_id "aRpCIgM_PykfYnxh-j-rtQAAAQ4"]
[Mon Nov 17 05:29:07.772921 2025] [:error] [pid 39537:tid 39550] [client 172.192.58.120:19447] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gmo.php"] [unique_id "aRpCI4ZRrh1pcrdcLB_ZZgAAAMo"]
[Mon Nov 17 05:29:11.157355 2025] [:error] [pid 40548:tid 40551] [client 172.192.58.120:19431] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gmo.php"] [unique_id "aRpCJwM_PykfYnxh-j-ruwAAAQE"]
[Mon Nov 17 05:29:12.102520 2025] [:error] [pid 39451:tid 39512] [client 172.192.58.120:53464] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gmo.php"] [unique_id "aRpCKOfgkqXTS0SO3fBnigAAAIQ"]
[Mon Nov 17 05:29:12.851649 2025] [:error] [pid 39537:tid 39562] [client 172.192.58.120:18915] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/golden.php"] [unique_id "aRpCKIZRrh1pcrdcLB_ZZwAAANY"]
[Mon Nov 17 05:29:17.510221 2025] [:error] [pid 40548:tid 40561] [client 172.192.58.120:19117] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/golden.php"] [unique_id "aRpCLQM_PykfYnxh-j-rvQAAAQs"]
[Mon Nov 17 05:29:22.325868 2025] [:error] [pid 39537:tid 39555] [client 172.192.58.120:18912] File does not exist: /usr/local/apache/htdocs/suspended-page/golden.php
[Mon Nov 17 05:29:22.443342 2025] [:error] [pid 39537:tid 39549] [client 172.192.58.120:18912] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Nov 17 05:29:22.563310 2025] [:error] [pid 39537:tid 39564] [client 172.192.58.120:18912] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Nov 17 05:29:22.682272 2025] [:error] [pid 39537:tid 39541] [client 172.192.58.120:18912] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Mon Nov 17 05:29:22.817687 2025] [:error] [pid 39537:tid 39561] [client 172.192.58.120:18912] File does not exist: /usr/local/apache/htdocs/suspended-page/lc.php
[Mon Nov 17 05:29:22.953060 2025] [:error] [pid 39537:tid 39545] [client 172.192.58.120:18912] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Mon Nov 17 05:29:23.138769 2025] [:error] [pid 39537:tid 39551] [client 172.192.58.120:18912] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Mon Nov 17 05:29:23.267965 2025] [:error] [pid 39537:tid 39544] [client 172.192.58.120:18912] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Mon Nov 17 05:29:23.410403 2025] [:error] [pid 39537:tid 39547] [client 172.192.58.120:18912] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Mon Nov 17 05:29:23.545489 2025] [:error] [pid 39537:tid 39550] [client 172.192.58.120:18912] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Mon Nov 17 05:29:23.684199 2025] [:error] [pid 39537:tid 39540] [client 172.192.58.120:18912] File does not exist: /usr/local/apache/htdocs/suspended-page/ot.php
[Mon Nov 17 05:29:23.823815 2025] [:error] [pid 39537:tid 39563] [client 172.192.58.120:18912] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/past.php"] [unique_id "aRpCM4ZRrh1pcrdcLB_ZgwAAANc"]
[Mon Nov 17 05:29:27.618884 2025] [:error] [pid 39451:tid 39530] [client 172.192.58.120:52705] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/past.php"] [unique_id "aRpCN-fgkqXTS0SO3fBnkQAAAJY"]
[Mon Nov 17 05:29:31.055658 2025] [:error] [pid 39449:tid 39454] [client 172.192.58.120:19088] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/past.php"] [unique_id "aRpCO6UCymTA3MDfzLOL1gAAAAA"]
[Mon Nov 17 05:29:32.740241 2025] [:error] [pid 39451:tid 39529] [client 172.192.58.120:18916] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/past.php"] [unique_id "aRpCPOfgkqXTS0SO3fBnlQAAAJU"]
[Mon Nov 17 05:29:34.723938 2025] [:error] [pid 39451:tid 39528] [client 172.192.58.120:18934] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/pepe.php"] [unique_id "aRpCPufgkqXTS0SO3fBnmQAAAJQ"]
[Mon Nov 17 05:29:41.921665 2025] [:error] [pid 39450:tid 39481] [client 172.192.58.120:19448] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/pepe.php"] [unique_id "aRpCReoZqPB4_7vNEDSTywAAAEA"]
[Mon Nov 17 05:29:43.283727 2025] [:error] [pid 39449:tid 39464] [client 172.192.58.120:19110] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/pepe.php"] [unique_id "aRpCR6UCymTA3MDfzLOL3QAAAAo"]
[Mon Nov 17 05:29:47.685959 2025] [:error] [pid 39449:tid 39476] [client 172.192.58.120:18930] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/pepe.php"] [unique_id "aRpCS6UCymTA3MDfzLOL4QAAABY"]
[Mon Nov 17 05:29:50.464200 2025] [:error] [pid 40548:tid 40553] [client 172.192.58.120:19455] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/pp.php"] [unique_id "aRpCTgM_PykfYnxh-j-r4QAAAQM"]
[Mon Nov 17 05:29:59.572897 2025] [:error] [pid 39449:tid 39461] [client 172.192.58.120:53399] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/pp.php"] [unique_id "aRpCV6UCymTA3MDfzLOL6AAAAAc"]
[Mon Nov 17 05:30:01.216167 2025] [:error] [pid 39449:tid 39454] [client 172.192.58.120:19081] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/pp.php"] [unique_id "aRpCWaUCymTA3MDfzLOL6QAAAAA"]
[Mon Nov 17 05:30:15.444440 2025] [:error] [pid 39537:tid 39564] [client 172.192.58.120:19122] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/re.php"] [unique_id "aRpCZ4ZRrh1pcrdcLB_ZwQAAANg"]
[Mon Nov 17 05:30:16.721935 2025] [:error] [pid 39450:tid 39496] [client 172.192.58.120:18905] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/re.php"] [unique_id "aRpCaOoZqPB4_7vNEDST7AAAAE8"]
[Mon Nov 17 05:30:17.562024 2025] [:error] [pid 39451:tid 39518] [client 172.192.58.120:19426] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/re.php"] [unique_id "aRpCaefgkqXTS0SO3fBnsgAAAIo"]
[Mon Nov 17 05:30:18.561226 2025] [:error] [pid 39451:tid 39529] [client 172.192.58.120:19124] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ss.php"] [unique_id "aRpCaufgkqXTS0SO3fBntQAAAJU"]
[Mon Nov 17 05:30:23.231088 2025] [:error] [pid 39449:tid 39454] [client 172.192.58.120:52676] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Mon Nov 17 05:30:23.363741 2025] [:error] [pid 39449:tid 39467] [client 172.192.58.120:52676] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Mon Nov 17 05:30:23.482201 2025] [:error] [pid 39449:tid 39471] [client 172.192.58.120:52676] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Mon Nov 17 05:30:23.619482 2025] [:error] [pid 39449:tid 39462] [client 172.192.58.120:52676] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Mon Nov 17 05:30:23.739510 2025] [:error] [pid 39449:tid 39455] [client 172.192.58.120:52676] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-logiin.php
[Mon Nov 17 05:30:23.858673 2025] [:error] [pid 39449:tid 39470] [client 172.192.58.120:52676] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php
[Mon Nov 17 05:30:25.311297 2025] [:error] [pid 39449:tid 39470] [client 172.192.58.120:52676] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Mon Nov 17 05:30:25.430881 2025] [:error] [pid 39449:tid 39464] [client 172.192.58.120:52676] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Mon Nov 17 05:30:25.561628 2025] [:error] [pid 39449:tid 39477] [client 172.192.58.120:52676] File does not exist: /usr/local/apache/htdocs/suspended-page/xl.php
[Mon Nov 17 05:30:25.690906 2025] [:error] [pid 39449:tid 39454] [client 172.192.58.120:52676] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Mon Nov 17 06:10:42.457801 2025] [:error] [pid 39450:tid 39494] [client 104.244.78.206:52865] [client 104.244.78.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.78.206, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRpL4uoZqPB4_7vNEDSf3gAAAE0"]
[Mon Nov 17 06:10:42.462098 2025] [:error] [pid 39450:tid 39494] [client 104.244.78.206:52865] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 17 07:27:16.761150 2025] [:error] [pid 39537:tid 39563] [client 104.244.78.229:47595] [client 104.244.78.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.78.229, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRpd1IZRrh1pcrdcLB8VIgAAANc"], referer: https://www.bing.com/
[Mon Nov 17 07:27:16.765104 2025] [:error] [pid 39537:tid 39563] [client 104.244.78.229:47595] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.bing.com/
[Mon Nov 17 10:36:19.708916 2025] [:error] [pid 39449:tid 39470] [client 18.209.176.2:33812] [client 18.209.176.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRqKI6UCymTA3MDfzLPoGAAAABA"]
[Mon Nov 17 12:24:39.573473 2025] [:error] [pid 19120:tid 19126] [client 170.106.192.3:37936] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRqjh4O1H08wfYmhCh-tSQAAAsQ"]
[Mon Nov 17 13:00:00.137764 2025] [:error] [pid 40548:tid 40558] [client 157.230.247.240:61542] [client 157.230.247.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.247.240, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRqr0AM_PykfYnxh-j81QwAAAQg"]
[Mon Nov 17 13:00:00.141812 2025] [:error] [pid 40548:tid 40558] [client 157.230.247.240:61542] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 17 13:13:36.794825 2025] [:error] [pid 39537:tid 39555] [client 213.209.157.81:57056] [client 213.209.157.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRqvAIZRrh1pcrdcLB-FwQAAAM8"]
[Mon Nov 17 13:13:37.094389 2025] [:error] [pid 39450:tid 39489] [client 213.209.157.81:41598] [client 213.209.157.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRqvAeoZqPB4_7vNEDQK-wAAAEg"]
[Mon Nov 17 13:55:22.460305 2025] [:error] [pid 15150:tid 15173] [client 213.209.157.81:38446] [client 213.209.157.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRq4yn2DEo_rcsFuxj1QdwAAAZU"]
[Mon Nov 17 14:40:56.919870 2025] [:error] [pid 65302:tid 65328] [client 18.209.176.2:44488] [client 18.209.176.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRrDeAPMSx2v85r8y7zR1wAAAVg"]
[Mon Nov 17 14:53:22.400946 2025] [:error] [pid 30801:tid 30808] [client 65.1.95.153:59328] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.development"] [unique_id "aRrGYjbGAU49DhMTBD7AXAAAAkU"]
[Mon Nov 17 14:53:22.403573 2025] [:error] [pid 30801:tid 30825] [client 65.1.95.153:59332] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aRrGYjbGAU49DhMTBD7AXQAAAlY"]
[Mon Nov 17 14:53:22.411311 2025] [:error] [pid 21538:tid 21541] [client 65.1.95.153:59336] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.local"] [unique_id "aRrGYqdTlflWtZ7KEyhQgQAAA4E"]
[Mon Nov 17 14:53:22.414430 2025] [:error] [pid 15888:tid 15900] [client 65.1.95.153:59358] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.prod"] [unique_id "aRrGYgjAdDTBm4W3qW0NJgAAAck"]
[Mon Nov 17 14:53:22.414430 2025] [:error] [pid 31419:tid 31440] [client 65.1.95.153:59346] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.dev"] [unique_id "aRrGYgHQ5Sbp7elmDZhbewAAApM"]
[Mon Nov 17 14:53:22.472315 2025] [:error] [pid 15888:tid 15906] [client 65.1.95.153:59376] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.production"] [unique_id "aRrGYgjAdDTBm4W3qW0NJwAAAc8"]
[Mon Nov 17 14:53:22.479203 2025] [:error] [pid 40548:tid 40555] [client 65.1.95.153:59388] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.test"] [unique_id "aRrGYgM_PykfYnxh-j9AmwAAAQU"]
[Mon Nov 17 14:53:22.489225 2025] [:error] [pid 39450:tid 39482] [client 65.1.95.153:59392] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.backup"] [unique_id "aRrGYuoZqPB4_7vNEDQU4QAAAEE"]
[Mon Nov 17 14:53:22.507456 2025] [:error] [pid 31419:tid 31423] [client 65.1.95.153:59372] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.staging"] [unique_id "aRrGYgHQ5Sbp7elmDZhbfAAAAoI"]
[Mon Nov 17 14:53:22.513819 2025] [:error] [pid 19303:tid 19317] [client 65.1.95.153:59404] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.bak"] [unique_id "aRrGYoG5BTwyMI8KItr9AQAAAws"]
[Mon Nov 17 14:53:22.516455 2025] [:error] [pid 19120:tid 19130] [client 65.1.95.153:59422] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.orig"] [unique_id "aRrGYoO1H08wfYmhCh-_fAAAAsg"]
[Mon Nov 17 14:53:22.521281 2025] [:error] [pid 21538:tid 21555] [client 65.1.95.153:59446] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.dist"] [unique_id "aRrGYqdTlflWtZ7KEyhQggAAA48"]
[Mon Nov 17 14:53:22.521302 2025] [:error] [pid 19303:tid 19319] [client 65.1.95.153:59400] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.old"] [unique_id "aRrGYoG5BTwyMI8KItr9AgAAAw0"]
[Mon Nov 17 14:53:22.538863 2025] [:error] [pid 40548:tid 40551] [client 65.1.95.153:59434] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.sample"] [unique_id "aRrGYgM_PykfYnxh-j9AnQAAAQE"]
[Mon Nov 17 14:53:22.540273 2025] [:error] [pid 21538:tid 21551] [client 65.1.95.153:59414] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env~"] [unique_id "aRrGYqdTlflWtZ7KEyhQgwAAA4s"]
[Mon Nov 17 14:53:22.550385 2025] [:error] [pid 19120:tid 19132] [client 65.1.95.153:59480] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/api/.env.save"] [unique_id "aRrGYoO1H08wfYmhCh-_fQAAAso"]
[Mon Nov 17 14:53:22.556099 2025] [:error] [pid 39451:tid 39514] [client 65.1.95.153:59452] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/admin/.env.save"] [unique_id "aRrGYufgkqXTS0SO3fD5GwAAAIY"]
[Mon Nov 17 14:53:22.570268 2025] [:error] [pid 21538:tid 21549] [client 65.1.95.153:59468] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.swp"] [unique_id "aRrGYqdTlflWtZ7KEyhQhAAAA4k"]
[Mon Nov 17 14:53:22.576334 2025] [:error] [pid 39450:tid 39499] [client 65.1.95.153:59488] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.tmp"] [unique_id "aRrGYuoZqPB4_7vNEDQU4gAAAFI"]
[Mon Nov 17 14:53:22.582942 2025] [:error] [pid 21538:tid 21543] [client 65.1.95.153:59504] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.save"] [unique_id "aRrGYqdTlflWtZ7KEyhQhQAAA4M"]
[Mon Nov 17 14:53:23.185735 2025] [:error] [pid 30801:tid 30808] [client 65.1.95.153:59574] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/admin/.env.old"] [unique_id "aRrGYzbGAU49DhMTBD7AXgAAAkU"]
[Mon Nov 17 14:53:23.185900 2025] [:error] [pid 15888:tid 15900] [client 65.1.95.153:59590] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/app/.env.bak"] [unique_id "aRrGYwjAdDTBm4W3qW0NKAAAAck"]
[Mon Nov 17 14:53:23.224963 2025] [:error] [pid 19120:tid 19133] [client 65.1.95.153:59562] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/config/.env.old"] [unique_id "aRrGY4O1H08wfYmhCh-_fgAAAss"]
[Mon Nov 17 14:53:23.229189 2025] [:error] [pid 19120:tid 19137] [client 65.1.95.153:59506] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/api/.env.old"] [unique_id "aRrGY4O1H08wfYmhCh-_fwAAAs8"]
[Mon Nov 17 14:53:23.256244 2025] [:error] [pid 30801:tid 30825] [client 65.1.95.153:59546] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/admin/.env.bak"] [unique_id "aRrGYzbGAU49DhMTBD7AXwAAAlY"]
[Mon Nov 17 14:53:23.262802 2025] [:error] [pid 31419:tid 31440] [client 65.1.95.153:59626] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/public/.env"] [unique_id "aRrGYwHQ5Sbp7elmDZhbfQAAApM"]
[Mon Nov 17 14:53:23.296241 2025] [:error] [pid 21538:tid 21541] [client 65.1.95.153:59620] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/app/.env.save"] [unique_id "aRrGY6dTlflWtZ7KEyhQhgAAA4E"]
[Mon Nov 17 14:53:23.298341 2025] [:error] [pid 19120:tid 19142] [client 65.1.95.153:59532] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/app/.env"] [unique_id "aRrGY4O1H08wfYmhCh-_gAAAAtQ"]
[Mon Nov 17 14:53:23.310124 2025] [:error] [pid 39450:tid 39481] [client 65.1.95.153:59516] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/api/.env"] [unique_id "aRrGY-oZqPB4_7vNEDQU4wAAAEA"]
[Mon Nov 17 14:53:23.343491 2025] [:error] [pid 39451:tid 39532] [client 65.1.95.153:59528] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/admin/.env"] [unique_id "aRrGY-fgkqXTS0SO3fD5HAAAAJg"]
[Mon Nov 17 14:53:23.356353 2025] [:error] [pid 31419:tid 31423] [client 65.1.95.153:59672] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/config/.env.bak"] [unique_id "aRrGYwHQ5Sbp7elmDZhbfgAAAoI"]
[Mon Nov 17 14:53:23.379309 2025] [:error] [pid 39450:tid 39482] [client 65.1.95.153:59638] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/src/.env.save"] [unique_id "aRrGY-oZqPB4_7vNEDQU5AAAAEE"]
[Mon Nov 17 14:53:23.392291 2025] [:error] [pid 21538:tid 21555] [client 65.1.95.153:59634] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/config/.env"] [unique_id "aRrGY6dTlflWtZ7KEyhQhwAAA48"]
[Mon Nov 17 14:53:23.399691 2025] [:error] [pid 19303:tid 19319] [client 65.1.95.153:59652] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/src/.env"] [unique_id "aRrGY4G5BTwyMI8KItr9BAAAAw0"]
[Mon Nov 17 14:53:23.420301 2025] [:error] [pid 15888:tid 15906] [client 65.1.95.153:59606] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/api/.env.bak"] [unique_id "aRrGYwjAdDTBm4W3qW0NKQAAAc8"]
[Mon Nov 17 14:53:23.430793 2025] [:error] [pid 40548:tid 40563] [client 65.1.95.153:59646] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/src/.env.old"] [unique_id "aRrGYwM_PykfYnxh-j9AngAAAQ0"]
[Mon Nov 17 14:53:23.439722 2025] [:error] [pid 19120:tid 19125] [client 65.1.95.153:59616] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/src/.env.bak"] [unique_id "aRrGY4O1H08wfYmhCh-_gQAAAsM"]
[Mon Nov 17 14:53:23.442087 2025] [:error] [pid 40548:tid 40555] [client 65.1.95.153:59576] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/app/.env.old"] [unique_id "aRrGYwM_PykfYnxh-j9AnwAAAQU"]
[Mon Nov 17 14:53:23.449582 2025] [:error] [pid 40548:tid 40551] [client 65.1.95.153:59660] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/public/.env.save"] [unique_id "aRrGYwM_PykfYnxh-j9AoAAAAQE"]
[Mon Nov 17 14:53:23.483223 2025] [:error] [pid 19120:tid 19130] [client 65.1.95.153:59636] [client 65.1.95.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/config/.env.save"] [unique_id "aRrGY4O1H08wfYmhCh-_ggAAAsg"]
[Mon Nov 17 18:38:01.638348 2025] [:error] [pid 65302:tid 65325] [client 195.178.110.223:52380] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRr7CQPMSx2v85r8y7z0ZgAAAVU"]
[Mon Nov 17 20:36:48.295014 2025] [:error] [pid 31419:tid 31439] [client 213.209.157.81:58174] [client 213.209.157.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.env"] [unique_id "aRsW4AHQ5Sbp7elmDZieuwAAApI"]
[Mon Nov 17 21:03:14.510796 2025] [:error] [pid 39451:tid 39513] [client 213.209.157.81:44420] [client 213.209.157.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aRsdEufgkqXTS0SO3fAp8AAAAIU"]
[Mon Nov 17 21:40:49.488199 2025] [:error] [pid 32753:tid 32770] [client 111.172.249.49:39758] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRsl4U6YNqI5vkht922bXAAAA84"]
[Mon Nov 17 22:56:22.138489 2025] [:error] [pid 39449:tid 39465] [client 80.77.123.93:58578] [client 80.77.123.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.77.123.93, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRs3lqUCymTA3MDfzLN9VQAAAAs"]
[Mon Nov 17 22:56:22.141691 2025] [:error] [pid 39449:tid 39465] [client 80.77.123.93:58578] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 17 22:56:23.885774 2025] [:error] [pid 31419:tid 31423] [client 80.77.123.93:52512] [client 80.77.123.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.77.123.93, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRs3lwHQ5Sbp7elmDZi0nAAAAoI"]
[Mon Nov 17 22:56:23.891624 2025] [:error] [pid 31419:tid 31423] [client 80.77.123.93:52512] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 00:10:14.658703 2025] [:error] [pid 39451:tid 39526] [client 222.253.48.28:41880] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRtI5ufgkqXTS0SO3fA_MgAAAJI"]
[Tue Nov 18 00:10:14.663236 2025] [:error] [pid 39451:tid 39526] [client 222.253.48.28:41880] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 00:10:16.660679 2025] [:error] [pid 20913:tid 20918] [client 222.253.48.28:41888] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRtI6OkafGNeN3nY1beBCgAAA0M"]
[Tue Nov 18 00:10:16.668128 2025] [:error] [pid 20913:tid 20918] [client 222.253.48.28:41888] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 00:51:55.776346 2025] [:error] [pid 40793:tid 40873] [client 222.253.48.28:57676] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRtSqwzccxeNeH-NUVgfBgAAAFc"]
[Tue Nov 18 00:51:55.780372 2025] [:error] [pid 40793:tid 40873] [client 222.253.48.28:57676] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 00:51:57.274798 2025] [:error] [pid 40562:tid 40630] [client 222.253.48.28:57686] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRtSrR18kaCmPuHE4a8BqAAAAUc"]
[Tue Nov 18 00:51:57.283046 2025] [:error] [pid 40562:tid 40630] [client 222.253.48.28:57686] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 09:14:07.116108 2025] [:error] [pid 61392:tid 61432] [client 144.172.97.176:59460] [client 144.172.97.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRvIX3Smvb496zZxueL_HwAAAEM"]
[Tue Nov 18 10:10:28.924368 2025] [:error] [pid 9935:tid 9954] [client 175.6.217.4:55974] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRvVlAWOMXsrZFRF6sgeSwAAAZE"]
[Tue Nov 18 10:42:15.682103 2025] [:error] [pid 61393:tid 61467] [client 144.172.97.176:55976] [client 144.172.97.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRvdB2H9XjlbVPv9gQVZ_gAAAIs"]
[Tue Nov 18 15:20:26.344845 2025] [:error] [pid 44624:tid 44635] [client 199.195.251.69:1229] [client 199.195.251.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.195.251.69, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aRweOillffozoBluWCUlmQAAAYg"], referer: https://www.bing.com/
[Tue Nov 18 15:20:26.348760 2025] [:error] [pid 44624:tid 44635] [client 199.195.251.69:1229] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.bing.com/
[Tue Nov 18 16:38:57.943659 2025] [:error] [pid 44471:tid 44507] [client 117.33.163.216:59368] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aRwwoe_6m0bQO14XwtMySwAAAQM"]
[Tue Nov 18 16:41:17.510650 2025] [:error] [pid 44560:tid 44577] [client 64.227.32.66:42932] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v2/api-docs"] [unique_id "aRwxLQnbP7etF3q5-5txnQAAAMY"]
[Tue Nov 18 16:41:18.242352 2025] [:error] [pid 44472:tid 44543] [client 64.227.32.66:42944] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v3/api-docs"] [unique_id "aRwxLoKhGwkiLjv8BQzMUwAAAUw"]
[Tue Nov 18 16:41:18.973974 2025] [:error] [pid 44471:tid 44508] [client 64.227.32.66:42956] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/api-docs/swagger.json"] [unique_id "aRwxLu_6m0bQO14XwtMy4gAAAQQ"]
[Tue Nov 18 16:41:19.701947 2025] [:error] [pid 44624:tid 44651] [client 64.227.32.66:42964] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/api/swagger.json"] [unique_id "aRwxLyllffozoBluWCVRgAAAAZg"]
[Tue Nov 18 16:41:20.433211 2025] [:error] [pid 1387:tid 1413] [client 64.227.32.66:42976] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/@vite/env"] [unique_id "aRwxMEzBvalKyx3hMvU-YwAAABQ"]
[Tue Nov 18 16:41:21.167541 2025] [:error] [pid 44472:tid 44532] [client 64.227.32.66:42986] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/actuator/env"] [unique_id "aRwxMYKhGwkiLjv8BQzMWQAAAUE"]
[Tue Nov 18 16:41:21.899437 2025] [:error] [pid 1387:tid 1400] [client 64.227.32.66:42990] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/server"] [unique_id "aRwxMUzBvalKyx3hMvU-ZgAAAAc"]
[Tue Nov 18 16:41:22.631869 2025] [:error] [pid 44471:tid 44516] [client 64.227.32.66:43004] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.vscode/sftp.json"] [unique_id "aRwxMu_6m0bQO14XwtMy5AAAAQw"]
[Tue Nov 18 16:41:23.364444 2025] [:error] [pid 1387:tid 1395] [client 64.227.32.66:43010] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/about"] [unique_id "aRwxM0zBvalKyx3hMvU-aQAAAAU"]
[Tue Nov 18 16:41:24.129945 2025] [:error] [pid 44624:tid 44644] [client 64.227.32.66:43022] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/debug/default/view"] [unique_id "aRwxNCllffozoBluWCVRiQAAAZE"]
[Tue Nov 18 16:41:24.952290 2025] [:error] [pid 44470:tid 44481] [client 64.227.32.66:43024] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v2/_catalog"] [unique_id "aRwxNDv-RLYfULjlgDamlgAAAEY"]
[Tue Nov 18 16:41:25.730291 2025] [:error] [pid 1387:tid 1401] [client 64.227.32.66:55782] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRwxNUzBvalKyx3hMvU-awAAAAg"]
[Tue Nov 18 16:41:26.635160 2025] [:error] [pid 44470:tid 44479] [client 64.227.32.66:55792] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/server-status"] [unique_id "aRwxNjv-RLYfULjlgDammwAAAEQ"]
[Tue Nov 18 16:41:27.427466 2025] [:error] [pid 44624:tid 44641] [client 64.227.32.66:55802] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/login.action"] [unique_id "aRwxNyllffozoBluWCVRkQAAAY4"]
[Tue Nov 18 16:41:28.344610 2025] [:error] [pid 44560:tid 44595] [client 64.227.32.66:55808] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/_all_dbs"] [unique_id "aRwxOAnbP7etF3q5-5txpQAAANg"]
[Tue Nov 18 16:41:29.124612 2025] [:error] [pid 44470:tid 44495] [client 64.227.32.66:55810] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.DS_Store"] [unique_id "aRwxOTv-RLYfULjlgDamngAAAFQ"]
[Tue Nov 18 16:41:29.901332 2025] [:error] [pid 44470:tid 44484] [client 64.227.32.66:55812] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aRwxOTv-RLYfULjlgDamnwAAAEk"]
[Tue Nov 18 16:41:30.677502 2025] [:error] [pid 44470:tid 44491] [client 64.227.32.66:55818] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aRwxOjv-RLYfULjlgDampAAAAFA"]
[Tue Nov 18 16:41:31.413070 2025] [:error] [pid 44470:tid 44483] [client 64.227.32.66:55820] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRwxOzv-RLYfULjlgDampQAAAEg"]
[Tue Nov 18 16:41:32.217515 2025] [:error] [pid 44560:tid 44580] [client 64.227.32.66:55830] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/config.json"] [unique_id "aRwxPAnbP7etF3q5-5txqwAAAMk"]
[Tue Nov 18 16:41:33.027731 2025] [:error] [pid 44560:tid 44591] [client 64.227.32.66:55838] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/telescope/requests"] [unique_id "aRwxPQnbP7etF3q5-5txrgAAANQ"]
[Tue Nov 18 16:41:33.794682 2025] [:error] [pid 44471:tid 44505] [client 64.227.32.66:55854] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/info.php"] [unique_id "aRwxPe_6m0bQO14XwtMy7QAAAQE"]
[Tue Nov 18 16:41:34.659059 2025] [:error] [pid 1387:tid 1390] [client 64.227.32.66:55856] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRwxPkzBvalKyx3hMvU-bgAAAAE"]
[Tue Nov 18 19:15:24.466223 2025] [:error] [pid 44470:tid 44497] [client 84.247.191.22:50540] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/css/"] [unique_id "aRxVTDv-RLYfULjlgDbWZAAAAFY"], referer: binance.com
[Tue Nov 18 20:44:36.900365 2025] [:error] [pid 57578:tid 57585] [client 95.154.200.58:33650] [client 95.154.200.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/js/mage/adminhtml/sales.js"] [unique_id "aRxqND9_jVUQm7Io75P7VAAAAIU"]
[Tue Nov 18 20:44:37.859704 2025] [:error] [pid 44471:tid 44516] [client 95.154.200.58:33314] [client 95.154.200.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/js/mage/adminhtml/sales.js"] [unique_id "aRxqNe_6m0bQO14XwtNzdwAAAQw"]
[Tue Nov 18 20:44:38.814098 2025] [:error] [pid 44560:tid 44572] [client 95.154.200.58:33328] [client 95.154.200.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/js/mage/adminhtml/tools.js"] [unique_id "aRxqNgnbP7etF3q5-5u6MwAAAME"]
[Tue Nov 18 20:44:39.771115 2025] [:error] [pid 3500:tid 3505] [client 95.154.200.58:33330] [client 95.154.200.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/js/mage/translate_inline.js"] [unique_id "aRxqN_CbRC7k2D7mjbR5xAAAAcM"]
[Tue Nov 18 20:44:40.730350 2025] [:error] [pid 3500:tid 3507] [client 95.154.200.58:33340] [client 95.154.200.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/skin/adminhtml/default/default/boxes.css"] [unique_id "aRxqOPCbRC7k2D7mjbR5xwAAAcU"]
[Tue Nov 18 20:44:41.683580 2025] [:error] [pid 44471:tid 44515] [client 95.154.200.58:33346] [client 95.154.200.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/js/prototype/validation.js"] [unique_id "aRxqOe_6m0bQO14XwtNzfQAAAQs"]
[Tue Nov 18 20:44:42.649624 2025] [:error] [pid 3500:tid 3523] [client 95.154.200.58:33360] [client 95.154.200.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/RELEASE_NOTES.txt"] [unique_id "aRxqOvCbRC7k2D7mjbR5zgAAAdU"]
[Tue Nov 18 21:37:31.071300 2025] [:error] [pid 44470:tid 44498] [client 45.134.79.103:50852] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRx2mzv-RLYfULjlgDb_TQAAAFc"]
[Tue Nov 18 21:37:31.720665 2025] [:error] [pid 3500:tid 3515] [client 45.134.79.103:58360] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aRx2m_CbRC7k2D7mjbSTygAAAc0"]
[Tue Nov 18 21:37:32.374509 2025] [:error] [pid 57578:tid 57587] [client 45.134.79.103:52591] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nD9_jVUQm7Io75ML3AAAAIc"]
[Wed Nov 19 02:45:28.769999 2025] [:error] [pid 3052:tid 3151] [client 49.205.156.158:50167] [client 49.205.156.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.156.158, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aRy-yFNM6bOMTTuJnz2p5QAAANY"]
[Wed Nov 19 02:45:28.776440 2025] [:error] [pid 3052:tid 3151] [client 49.205.156.158:50167] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 19 07:30:38.511717 2025] [:error] [pid 6919:tid 6928] [client 18.191.165.250:56457] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR0BnkYFdN1s_9xJVUmq-QAAAQY"]
[Wed Nov 19 07:30:38.909413 2025] [:error] [pid 6644:tid 6656] [client 18.191.165.250:56567] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR0Bnk0i6Rf788MB6sbZtwAAAMo"]
[Wed Nov 19 07:30:39.330055 2025] [:error] [pid 6644:tid 6656] [client 18.191.165.250:56705] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR0Bn00i6Rf788MB6sbZ1AAAAMo"]
[Wed Nov 19 07:30:39.728675 2025] [:error] [pid 6555:tid 6609] [client 18.191.165.250:56795] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR0Bn0bVJm8eMsGMTCONyAAAAFI"]
[Wed Nov 19 07:30:40.125474 2025] [:error] [pid 6555:tid 6607] [client 18.191.165.250:56880] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR0BoEbVJm8eMsGMTCON3QAAAFA"]
[Wed Nov 19 09:23:12.077954 2025] [:error] [pid 6556:tid 6619] [client 82.165.87.243:46284] [client 82.165.87.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.87.243, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aR0cAJuL7hhgrmdM1muZQwAAAIE"]
[Wed Nov 19 09:23:12.082682 2025] [:error] [pid 6556:tid 6619] [client 82.165.87.243:46284] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 19 09:23:13.134746 2025] [:error] [pid 6555:tid 6608] [client 82.165.87.243:46294] [client 82.165.87.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.87.243, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aR0cAUbVJm8eMsGMTCOqJgAAAFE"]
[Wed Nov 19 09:23:13.142796 2025] [:error] [pid 6555:tid 6608] [client 82.165.87.243:46294] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 19 17:58:39.715530 2025] [:error] [pid 6919:tid 6931] [client 222.79.103.59:35179] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aR2Uz0YFdN1s_9xJVUlg6wAAAQk"]
[Wed Nov 19 20:35:57.887731 2025] [:error] [pid 6555:tid 6603] [client 104.196.176.201:58212] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/media/system/js/core.js"] [unique_id "aR25rUbVJm8eMsGMTCM1FQAAAEw"]
[Wed Nov 19 22:54:27.790150 2025] [:error] [pid 6644:tid 6653] [client 177.72.158.74:1289] [client 177.72.158.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.72.158.74, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aR3aI00i6Rf788MB6sb1_QAAAMc"]
[Wed Nov 19 22:54:27.794720 2025] [:error] [pid 6644:tid 6653] [client 177.72.158.74:1289] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 19 23:01:27.154476 2025] [:error] [pid 6644:tid 6660] [client 84.20.25.22:26930] File does not exist: /usr/local/apache/htdocs/suspended-page/archivarix.cms.php, referer: http://jandakotpilotshop.com/archivarix.cms.php
[Thu Nov 20 03:21:31.130414 2025] [:error] [pid 8872:tid 8885] [client 43.166.246.180:56726] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aR4YuzkBDH0q-89RJLFUJwAAA0o"]
[Thu Nov 20 03:24:56.081199 2025] [:error] [pid 8365:tid 8393] [client 107.189.1.5:21221] [client 107.189.1.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.1.5, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aR4ZiBhyiKKdRMrEbr24RQAAApg"], referer: https://www.google.com/
[Thu Nov 20 03:24:56.087209 2025] [:error] [pid 8365:tid 8393] [client 107.189.1.5:21221] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Thu Nov 20 06:41:26.998672 2025] [:error] [pid 55430:tid 55448] [client 113.219.218.197:46672] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aR5HlvPZXaIMEU4pE7tNoAAAAM8"]
[Thu Nov 20 08:01:47.118838 2025] [:error] [pid 55343:tid 55418] [client 185.33.55.101:54482] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Nov 20 12:10:21.939992 2025] [:error] [pid 55430:tid 55444] [client 98.81.111.26:57612] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR6UrfPZXaIMEU4pE7ugogAAAMs"]
[Thu Nov 20 12:10:22.349839 2025] [:error] [pid 34405:tid 34421] [client 98.81.111.26:59982] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR6UrjFpvu8oRK7ATfvJQwAAAQ4"]
[Thu Nov 20 12:10:22.762584 2025] [:error] [pid 55430:tid 55439] [client 98.81.111.26:50362] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR6UrvPZXaIMEU4pE7ug1wAAAMY"]
[Thu Nov 20 12:10:23.170632 2025] [:error] [pid 55343:tid 55400] [client 98.81.111.26:49861] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR6Ur1WlO3EnyVMV7w5lTgAAAIE"]
[Thu Nov 20 12:10:23.600656 2025] [:error] [pid 55430:tid 55449] [client 98.81.111.26:57173] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR6Ur_PZXaIMEU4pE7uhBgAAANA"]
[Thu Nov 20 12:15:51.566701 2025] [:error] [pid 55340:tid 55357] [client 98.81.111.26:55655] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR6V9_OxD-NeMydTybBNTwAAAAw"]
[Thu Nov 20 12:15:51.976680 2025] [:error] [pid 55340:tid 55369] [client 98.81.111.26:59257] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR6V9_OxD-NeMydTybBNWQAAABg"]
[Thu Nov 20 12:15:52.383778 2025] [:error] [pid 55343:tid 55411] [client 98.81.111.26:61784] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR6V-FWlO3EnyVMV7w5orgAAAIw"]
[Thu Nov 20 12:15:52.787091 2025] [:error] [pid 55342:tid 55393] [client 98.81.111.26:64248] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR6V-Lg6x32Tvk7fIG-POgAAAFU"]
[Thu Nov 20 12:15:53.193110 2025] [:error] [pid 55342:tid 55392] [client 98.81.111.26:49932] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aR6V-bg6x32Tvk7fIG-PSwAAAFQ"]
[Thu Nov 20 19:26:18.645780 2025] [:error] [pid 55343:tid 55419] [client 49.204.141.247:29500] [client 49.204.141.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.141.247, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aR762lWlO3EnyVMV7w64LwAAAJQ"]
[Thu Nov 20 19:26:18.650563 2025] [:error] [pid 55343:tid 55419] [client 49.204.141.247:29500] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Nov 21 00:28:26.271944 2025] [:error] [pid 13536:tid 13730] [client 185.208.164.111:46246] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Fri Nov 21 03:17:13.844199 2025] [:error] [pid 58500:tid 58524] [client 93.123.109.7:40608] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aR9pObcAJP0gioRK76aVxwAAANI"]
[Fri Nov 21 08:02:39.586208 2025] [:error] [pid 46276:tid 46303] [client 113.141.91.58:35073] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aR-sH3bpxuSAfajqqKOoUgAAAhQ"]
[Fri Nov 21 09:41:03.220869 2025] [:error] [pid 13326:tid 13369] [client 107.189.14.134:21506] [client 107.189.14.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.14.134, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aR_DL9h942-HkDIkOWogaAAAAEs"], referer: https://www.google.com/
[Fri Nov 21 09:41:03.225872 2025] [:error] [pid 13326:tid 13369] [client 107.189.14.134:21506] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Fri Nov 21 14:32:51.929584 2025] [:error] [pid 25429:tid 25441] [client 134.149.18.28:49784] File does not exist: /usr/local/apache/htdocs/suspended-page/dev1s.php
[Fri Nov 21 14:32:52.183397 2025] [:error] [pid 25429:tid 25442] [client 134.149.18.28:49784] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Fri Nov 21 14:32:52.447180 2025] [:error] [pid 25429:tid 25435] [client 134.149.18.28:49784] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Nov 21 14:32:52.699977 2025] [:error] [pid 25429:tid 25438] [client 134.149.18.28:49784] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Fri Nov 21 14:32:53.271026 2025] [:error] [pid 25429:tid 25456] [client 134.149.18.28:49784] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/readme.php"] [unique_id "aSAHlT4rZbRSr7vu-NN4RgAAABc"]
[Fri Nov 21 14:32:54.558709 2025] [:error] [pid 25554:tid 25577] [client 134.149.18.28:49703] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/readme.php"] [unique_id "aSAHlh-NtB-9AzFZrk4JOQAAARM"]
[Fri Nov 21 14:32:58.027828 2025] [:error] [pid 25429:tid 25441] [client 134.149.18.28:49701] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/readme.php"] [unique_id "aSAHmj4rZbRSr7vu-NN4UwAAAAg"]
[Fri Nov 21 14:32:59.784951 2025] [:error] [pid 25554:tid 25580] [client 134.149.18.28:49664] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/readme.php"] [unique_id "aSAHmx-NtB-9AzFZrk4JTwAAARY"]
[Fri Nov 21 14:33:00.973112 2025] [:error] [pid 25521:tid 25530] [client 134.149.18.28:49753] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gmo.php"] [unique_id "aSAHnPhXnBMilDddn3WtVAAAAMc"]
[Fri Nov 21 14:33:05.036230 2025] [:error] [pid 25554:tid 25571] [client 134.149.18.28:49755] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gmo.php"] [unique_id "aSAHoR-NtB-9AzFZrk4JYwAAAQ0"]
[Fri Nov 21 14:33:12.288479 2025] [:error] [pid 25430:tid 25475] [client 134.149.18.28:49751] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gmo.php"] [unique_id "aSAHqKpnWJcWt_4foXkRawAAAE8"]
[Fri Nov 21 14:33:15.493232 2025] [:error] [pid 25554:tid 25558] [client 134.149.18.28:43905] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gmo.php"] [unique_id "aSAHqx-NtB-9AzFZrk4J9QAAAQA"]
[Fri Nov 21 14:33:25.280006 2025] [:error] [pid 25554:tid 25562] [client 134.149.18.28:49781] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/autoload_classmap.php"] [unique_id "aSAHtR-NtB-9AzFZrk4KQQAAAQQ"]
[Fri Nov 21 14:33:30.408672 2025] [:error] [pid 25521:tid 25529] [client 134.149.18.28:49754] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/autoload_classmap.php"] [unique_id "aSAHuvhXnBMilDddn3WttwAAAMY"]
[Fri Nov 21 14:33:33.477770 2025] [:error] [pid 25554:tid 25559] [client 134.149.18.28:49678] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSAHvR-NtB-9AzFZrk4KSgAAAQE"]
[Fri Nov 21 14:33:37.127883 2025] [:error] [pid 25431:tid 25511] [client 134.149.18.28:49783] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/BypassBest.php"] [unique_id "aSAHwcklhXxmoIExII38YAAAAJg"]
[Fri Nov 21 14:33:40.646358 2025] [:error] [pid 25430:tid 25475] [client 134.149.18.28:49704] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/BypassBest.php"] [unique_id "aSAHxKpnWJcWt_4foXkRhAAAAE8"]
[Fri Nov 21 14:34:01.720973 2025] [:error] [pid 25430:tid 25478] [client 134.149.18.28:49716] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Fri Nov 21 14:34:02.257964 2025] [:error] [pid 25430:tid 25470] [client 134.149.18.28:49716] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Fri Nov 21 14:34:02.513317 2025] [:error] [pid 25430:tid 25481] [client 134.149.18.28:49716] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Fri Nov 21 14:34:03.021697 2025] [:error] [pid 25430:tid 25468] [client 134.149.18.28:49716] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/adminer.php"] [unique_id "aSAH26pnWJcWt_4foXkRwgAAAEg"]
[Fri Nov 21 14:34:04.861224 2025] [:error] [pid 25521:tid 25544] [client 134.149.18.28:49752] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/adminer.php"] [unique_id "aSAH3PhXnBMilDddn3WuGwAAANU"]
[Fri Nov 21 14:34:06.749158 2025] [:error] [pid 25554:tid 25565] [client 134.149.18.28:49791] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/adminer.php"] [unique_id "aSAH3h-NtB-9AzFZrk4KmgAAAQc"]
[Fri Nov 21 14:34:14.167027 2025] [:error] [pid 25521:tid 25533] [client 134.149.18.28:49787] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/adminer.php"] [unique_id "aSAH5vhXnBMilDddn3WuKgAAAMo"]
[Fri Nov 21 14:34:23.584389 2025] [:error] [pid 25431:tid 25491] [client 134.149.18.28:49718] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSAH78klhXxmoIExII38vwAAAIQ"]
[Fri Nov 21 14:34:34.390615 2025] [:error] [pid 25554:tid 25572] [client 134.149.18.28:49790] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSAH-h-NtB-9AzFZrk4K4wAAAQ4"]
[Fri Nov 21 14:34:36.077748 2025] [:error] [pid 25554:tid 25562] [client 134.149.18.28:49693] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSAH_B-NtB-9AzFZrk4K6QAAAQQ"]
[Fri Nov 21 14:35:01.119700 2025] [:error] [pid 25521:tid 25547] [client 134.149.18.28:43910] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/0.php"] [unique_id "aSAIFfhXnBMilDddn3WudwAAANg"]
[Fri Nov 21 14:35:03.607609 2025] [:error] [pid 25554:tid 25569] [client 134.149.18.28:49698] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSAIFx-NtB-9AzFZrk4LJgAAAQs"]
[Fri Nov 21 14:35:04.905437 2025] [:error] [pid 25521:tid 25536] [client 134.149.18.28:49774] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri Nov 21 14:35:05.218086 2025] [:error] [pid 25521:tid 25541] [client 134.149.18.28:49774] File does not exist: /usr/local/apache/htdocs/suspended-page/i1.php
[Fri Nov 21 14:35:05.479636 2025] [:error] [pid 25521:tid 25529] [client 134.149.18.28:49774] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Fri Nov 21 14:35:06.263560 2025] [:error] [pid 25521:tid 25542] [client 134.149.18.28:49774] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Nov 21 14:35:06.514791 2025] [:error] [pid 25521:tid 25525] [client 134.149.18.28:49774] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/mail.php"] [unique_id "aSAIGvhXnBMilDddn3WukAAAAMI"]
[Fri Nov 21 14:35:10.145154 2025] [:error] [pid 25521:tid 25527] [client 134.149.18.28:49722] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/mail.php"] [unique_id "aSAIHvhXnBMilDddn3WuowAAAMQ"]
[Fri Nov 21 14:35:14.513880 2025] [:error] [pid 25431:tid 25503] [client 134.149.18.28:49684] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/mail.php"] [unique_id "aSAIIsklhXxmoIExII39JgAAAJA"]
[Fri Nov 21 14:35:15.808094 2025] [:error] [pid 25554:tid 25575] [client 134.149.18.28:49715] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/mail.php"] [unique_id "aSAIIx-NtB-9AzFZrk4LQwAAARE"]
[Fri Nov 21 14:35:18.137725 2025] [:error] [pid 25431:tid 25487] [client 134.149.18.28:49677] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/fm.php"] [unique_id "aSAIJsklhXxmoIExII39KwAAAIA"]
[Fri Nov 21 14:35:23.159074 2025] [:error] [pid 25429:tid 25453] [client 134.149.18.28:49726] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/fm.php"] [unique_id "aSAIKz4rZbRSr7vu-NN5RwAAABQ"]
[Fri Nov 21 14:35:32.711255 2025] [:error] [pid 25430:tid 25460] [client 134.149.18.28:49771] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/17.php"] [unique_id "aSAINKpnWJcWt_4foXkSXwAAAEA"]
[Fri Nov 21 14:35:36.688001 2025] [:error] [pid 25429:tid 25444] [client 134.149.18.28:43463] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/17.php"] [unique_id "aSAIOD4rZbRSr7vu-NN5YQAAAAs"]
[Fri Nov 21 14:35:42.536507 2025] [:error] [pid 25429:tid 25441] [client 134.149.18.28:49777] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/17.php"] [unique_id "aSAIPj4rZbRSr7vu-NN5bgAAAAg"]
[Fri Nov 21 14:35:46.210585 2025] [:error] [pid 25430:tid 25469] [client 134.149.18.28:49765] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/17.php"] [unique_id "aSAIQqpnWJcWt_4foXkSuQAAAEk"]
[Fri Nov 21 14:35:47.773465 2025] [:error] [pid 25430:tid 25474] [client 134.149.18.28:49728] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/0.php"] [unique_id "aSAIQ6pnWJcWt_4foXkSvAAAAE4"]
[Fri Nov 21 14:35:48.847817 2025] [:error] [pid 25554:tid 25573] [client 134.149.18.28:49780] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/0.php"] [unique_id "aSAIRB-NtB-9AzFZrk4LkwAAAQ8"]
[Fri Nov 21 14:35:55.003065 2025] [:error] [pid 25521:tid 25523] [client 134.149.18.28:49705] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/0.php"] [unique_id "aSAIS_hXnBMilDddn3Wu9AAAAMA"]
[Fri Nov 21 14:35:58.410240 2025] [:error] [pid 25429:tid 25438] [client 134.149.18.28:49769] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/0.php"] [unique_id "aSAITj4rZbRSr7vu-NN5fQAAAAU"]
[Fri Nov 21 14:36:00.981731 2025] [:error] [pid 25554:tid 25576] [client 134.149.18.28:49697] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSAIUB-NtB-9AzFZrk4LpgAAARI"]
[Fri Nov 21 14:36:05.536716 2025] [:error] [pid 25521:tid 25526] [client 134.149.18.28:43912] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSAIVfhXnBMilDddn3WvBAAAAMM"]
[Fri Nov 21 14:36:09.993627 2025] [:error] [pid 25429:tid 25438] [client 134.149.18.28:43961] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Fri Nov 21 14:36:10.265057 2025] [:error] [pid 25429:tid 25454] [client 134.149.18.28:43961] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSAIWj4rZbRSr7vu-NN5kgAAABU"]
[Fri Nov 21 14:36:19.204919 2025] [:error] [pid 25431:tid 25489] [client 134.149.18.28:49778] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/click.php"] [unique_id "aSAIY8klhXxmoIExII39kAAAAII"]
[Fri Nov 21 14:36:22.819409 2025] [:error] [pid 25521:tid 25525] [client 134.149.18.28:49694] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/click.php"] [unique_id "aSAIZvhXnBMilDddn3WvIgAAAMI"]
[Fri Nov 21 14:36:24.630095 2025] [:error] [pid 25430:tid 25472] [client 134.149.18.28:49691] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/click.php"] [unique_id "aSAIaKpnWJcWt_4foXkS4AAAAEw"]
[Fri Nov 21 14:36:26.449208 2025] [:error] [pid 25554:tid 25574] [client 134.149.18.28:49674] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/click.php"] [unique_id "aSAIah-NtB-9AzFZrk4L1QAAARA"]
[Fri Nov 21 14:36:29.090662 2025] [:error] [pid 25521:tid 25524] [client 134.149.18.28:43917] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/install.php"] [unique_id "aSAIbfhXnBMilDddn3WvLwAAAME"]
[Fri Nov 21 14:36:31.733387 2025] [:error] [pid 25431:tid 25504] [client 134.149.18.28:43942] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/install.php"] [unique_id "aSAIb8klhXxmoIExII39tAAAAJE"]
[Fri Nov 21 14:36:36.281996 2025] [:error] [pid 25430:tid 25474] [client 134.149.18.28:49700] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/install.php"] [unique_id "aSAIdKpnWJcWt_4foXkS8QAAAE4"]
[Fri Nov 21 14:36:41.181072 2025] [:error] [pid 25554:tid 25571] [client 134.149.18.28:49747] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/install.php"] [unique_id "aSAIeR-NtB-9AzFZrk4MMgAAAQ0"]
[Fri Nov 21 14:36:48.120786 2025] [:error] [pid 25429:tid 25452] [client 134.149.18.28:49690] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/10.php"] [unique_id "aSAIgD4rZbRSr7vu-NN50AAAABM"]
[Fri Nov 21 14:36:55.865817 2025] [:error] [pid 25521:tid 25545] [client 134.149.18.28:43471] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/10.php"] [unique_id "aSAIh_hXnBMilDddn3WvjwAAANY"]
[Fri Nov 21 14:36:59.586357 2025] [:error] [pid 25429:tid 25441] [client 134.149.18.28:49725] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/goat1.php"] [unique_id "aSAIiz4rZbRSr7vu-NN54QAAAAg"]
[Fri Nov 21 14:37:03.868301 2025] [:error] [pid 25554:tid 25570] [client 134.149.18.28:49732] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/goat1.php"] [unique_id "aSAIjx-NtB-9AzFZrk4MYwAAAQw"]
[Fri Nov 21 14:37:06.545499 2025] [:error] [pid 25554:tid 25559] [client 134.149.18.28:49714] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/goat1.php"] [unique_id "aSAIkh-NtB-9AzFZrk4MaQAAAQE"]
[Fri Nov 21 14:37:29.415207 2025] [:error] [pid 25521:tid 25536] [client 134.149.18.28:43927] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/yu.php"] [unique_id "aSAIqfhXnBMilDddn3Wv_QAAAM0"]
[Fri Nov 21 14:37:32.254678 2025] [:error] [pid 25431:tid 25504] [client 134.149.18.28:49699] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/yu.php"] [unique_id "aSAIrMklhXxmoIExII3-SgAAAJE"]
[Fri Nov 21 14:37:35.257736 2025] [:error] [pid 25521:tid 25546] [client 134.149.18.28:49784] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/yu.php"] [unique_id "aSAIr_hXnBMilDddn3WwAwAAANc"]
[Fri Nov 21 14:37:37.010876 2025] [:error] [pid 25554:tid 25558] [client 134.149.18.28:49758] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/yu.php"] [unique_id "aSAIsR-NtB-9AzFZrk4M3gAAAQA"]
[Fri Nov 21 14:37:40.965870 2025] [:error] [pid 25521:tid 25525] [client 134.149.18.28:49710] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/Marvins.php"] [unique_id "aSAItPhXnBMilDddn3WwFwAAAMI"]
[Fri Nov 21 14:37:44.667355 2025] [:error] [pid 25431:tid 25492] [client 134.149.18.28:43925] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/Marvins.php"] [unique_id "aSAIuMklhXxmoIExII3-cwAAAIU"]
[Fri Nov 21 14:37:48.950613 2025] [:error] [pid 25521:tid 25535] [client 134.149.18.28:49676] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/Marvins.php"] [unique_id "aSAIvPhXnBMilDddn3WwNgAAAMw"]
[Fri Nov 21 14:37:52.466716 2025] [:error] [pid 25521:tid 25540] [client 134.149.18.28:43926] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/Marvins.php"] [unique_id "aSAIwPhXnBMilDddn3WwOwAAANE"]
[Fri Nov 21 14:37:55.502456 2025] [:error] [pid 25430:tid 25467] [client 134.149.18.28:49727] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/admin.php"] [unique_id "aSAIw6pnWJcWt_4foXkTnAAAAEc"]
[Fri Nov 21 14:37:58.128182 2025] [:error] [pid 25521:tid 25540] [client 134.149.18.28:49755] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/admin.php"] [unique_id "aSAIxvhXnBMilDddn3WwSwAAANE"]
[Fri Nov 21 14:38:03.448786 2025] [:error] [pid 25554:tid 25565] [client 134.149.18.28:49703] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/admin.php"] [unique_id "aSAIyx-NtB-9AzFZrk4NSgAAAQc"]
[Fri Nov 21 14:38:05.140831 2025] [:error] [pid 25554:tid 25573] [client 134.149.18.28:43933] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/admin.php"] [unique_id "aSAIzR-NtB-9AzFZrk4NUQAAAQ8"]
[Fri Nov 21 14:38:07.707055 2025] [:error] [pid 25431:tid 25505] [client 134.149.18.28:15439] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/124.php"] [unique_id "aSAIz8klhXxmoIExII3-xQAAAJI"]
[Fri Nov 21 14:38:10.619753 2025] [:error] [pid 25429:tid 25454] [client 134.149.18.28:49738] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/124.php"] [unique_id "aSAI0j4rZbRSr7vu-NN6bwAAABU"]
[Fri Nov 21 14:38:12.102702 2025] [:error] [pid 25429:tid 25442] [client 134.149.18.28:49735] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/124.php"] [unique_id "aSAI1D4rZbRSr7vu-NN6cQAAAAk"]
[Fri Nov 21 14:38:14.354725 2025] [:error] [pid 25554:tid 25568] [client 134.149.18.28:43935] File does not exist: /usr/local/apache/htdocs/suspended-page/124.php
[Fri Nov 21 14:38:15.086504 2025] [:error] [pid 25554:tid 25565] [client 134.149.18.28:43935] File does not exist: /usr/local/apache/htdocs/suspended-page/q.php
[Fri Nov 21 14:38:15.339943 2025] [:error] [pid 25554:tid 25577] [client 134.149.18.28:43935] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Fri Nov 21 14:38:15.852148 2025] [:error] [pid 25554:tid 25572] [client 134.149.18.28:43935] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Nov 21 14:38:17.420651 2025] [:error] [pid 25554:tid 25582] [client 134.149.18.28:43935] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Fri Nov 21 14:38:17.968418 2025] [:error] [pid 25554:tid 25559] [client 134.149.18.28:43935] File does not exist: /usr/local/apache/htdocs/suspended-page/sk.php
[Fri Nov 21 14:38:18.239190 2025] [:error] [pid 25554:tid 25564] [client 134.149.18.28:43935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-crom.php
[Fri Nov 21 14:38:18.499566 2025] [:error] [pid 25554:tid 25561] [client 134.149.18.28:43935] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/max.php"] [unique_id "aSAI2h-NtB-9AzFZrk4OHwAAAQM"]
[Fri Nov 21 14:38:19.612297 2025] [:error] [pid 25554:tid 25559] [client 134.149.18.28:43966] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/max.php"] [unique_id "aSAI2x-NtB-9AzFZrk4OKgAAAQE"]
[Fri Nov 21 14:38:21.806423 2025] [:error] [pid 25431:tid 25495] [client 134.149.18.28:49712] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/max.php"] [unique_id "aSAI3cklhXxmoIExII3-_AAAAIg"]
[Fri Nov 21 14:38:24.174623 2025] [:error] [pid 25521:tid 25529] [client 134.149.18.28:49681] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/max.php"] [unique_id "aSAI4PhXnBMilDddn3WwpAAAAMY"]
[Fri Nov 21 14:38:25.807041 2025] [:error] [pid 25429:tid 25436] [client 134.149.18.28:49664] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/about.php"] [unique_id "aSAI4T4rZbRSr7vu-NN6lgAAAAM"]
[Fri Nov 21 14:38:27.454509 2025] [:error] [pid 25554:tid 25575] [client 134.149.18.28:49672] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/about.php"] [unique_id "aSAI4x-NtB-9AzFZrk4ORwAAARE"]
[Fri Nov 21 14:38:31.531134 2025] [:error] [pid 25429:tid 25435] [client 134.149.18.28:49734] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/about.php"] [unique_id "aSAI5z4rZbRSr7vu-NN6rQAAAAI"]
[Fri Nov 21 14:38:33.309897 2025] [:error] [pid 25554:tid 25567] [client 134.149.18.28:43941] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/about.php"] [unique_id "aSAI6R-NtB-9AzFZrk4OUQAAAQk"]
[Fri Nov 21 14:38:36.991665 2025] [:error] [pid 25431:tid 25490] [client 134.149.18.28:49773] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/1100.php"] [unique_id "aSAI7MklhXxmoIExII3_HAAAAIM"]
[Fri Nov 21 14:38:40.868659 2025] [:error] [pid 25554:tid 25562] [client 134.149.18.28:43955] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/1100.php"] [unique_id "aSAI8B-NtB-9AzFZrk4OXAAAAQQ"]
[Fri Nov 21 14:38:45.203151 2025] [:error] [pid 25521:tid 25532] [client 134.149.18.28:49673] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/1100.php"] [unique_id "aSAI9fhXnBMilDddn3Ww2QAAAMk"]
[Fri Nov 21 14:38:46.440889 2025] [:error] [pid 25554:tid 25567] [client 134.149.18.28:43928] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/1100.php"] [unique_id "aSAI9h-NtB-9AzFZrk4OawAAAQk"]
[Fri Nov 21 14:38:49.386917 2025] [:error] [pid 25431:tid 25511] [client 134.149.18.28:49696] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/403.php"] [unique_id "aSAI-cklhXxmoIExII3_MAAAAJg"]
[Fri Nov 21 14:38:51.441842 2025] [:error] [pid 25429:tid 25438] [client 134.149.18.28:49783] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/403.php"] [unique_id "aSAI-z4rZbRSr7vu-NN61QAAAAU"]
[Fri Nov 21 14:38:53.435559 2025] [:error] [pid 25429:tid 25448] [client 134.149.18.28:49789] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/403.php"] [unique_id "aSAI_T4rZbRSr7vu-NN62wAAAA8"]
[Fri Nov 21 14:38:56.044106 2025] [:error] [pid 25521:tid 25544] [client 134.149.18.28:49687] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/403.php"] [unique_id "aSAJAPhXnBMilDddn3Ww-AAAANU"]
[Fri Nov 21 14:39:02.075677 2025] [:error] [pid 25554:tid 25569] [client 134.149.18.28:49770] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSAJBh-NtB-9AzFZrk4OmQAAAQs"]
[Fri Nov 21 14:39:07.164162 2025] [:error] [pid 25430:tid 25481] [client 134.149.18.28:49760] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSAJC6pnWJcWt_4foXkUYAAAAFU"]
[Fri Nov 21 14:39:16.579060 2025] [:error] [pid 25431:tid 25501] [client 134.149.18.28:49716] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/lock360.php"] [unique_id "aSAJFMklhXxmoIExII3_aQAAAI4"]
[Fri Nov 21 14:39:22.237458 2025] [:error] [pid 25554:tid 25568] [client 134.149.18.28:49779] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Nov 21 14:39:22.490849 2025] [:error] [pid 25554:tid 25582] [client 134.149.18.28:49779] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Fri Nov 21 14:39:22.815067 2025] [:error] [pid 25554:tid 25562] [client 134.149.18.28:49779] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Fri Nov 21 14:39:23.086915 2025] [:error] [pid 25554:tid 25563] [client 134.149.18.28:49779] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Nov 21 14:39:23.340866 2025] [:error] [pid 25554:tid 25566] [client 134.149.18.28:49779] File does not exist: /usr/local/apache/htdocs/suspended-page/oo.php
[Fri Nov 21 14:39:23.685939 2025] [:error] [pid 25554:tid 25581] [client 134.149.18.28:49779] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Fri Nov 21 14:39:23.947558 2025] [:error] [pid 25554:tid 25561] [client 134.149.18.28:49779] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSAJGx-NtB-9AzFZrk4OzQAAAQM"]
[Fri Nov 21 14:39:35.359261 2025] [:error] [pid 25554:tid 25560] [client 134.149.18.28:49743] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSAJJx-NtB-9AzFZrk4O6AAAAQI"]
[Fri Nov 21 14:39:43.153662 2025] [:error] [pid 25429:tid 25454] [client 134.149.18.28:43908] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ll.php"] [unique_id "aSAJLz4rZbRSr7vu-NN7GAAAABU"]
[Fri Nov 21 14:39:46.745732 2025] [:error] [pid 25554:tid 25569] [client 134.149.18.28:43923] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ll.php"] [unique_id "aSAJMh-NtB-9AzFZrk4PCAAAAQs"]
[Fri Nov 21 14:39:47.598496 2025] [:error] [pid 25521:tid 25546] [client 134.149.18.28:49768] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ll.php"] [unique_id "aSAJM_hXnBMilDddn3WxVwAAANc"]
[Fri Nov 21 14:39:51.934345 2025] [:error] [pid 25431:tid 25506] [client 134.149.18.28:49668] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ll.php"] [unique_id "aSAJN8klhXxmoIExII3_mQAAAJM"]
[Fri Nov 21 14:39:54.521248 2025] [:error] [pid 25554:tid 25560] [client 134.149.18.28:49707] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSAJOh-NtB-9AzFZrk4PFgAAAQI"]
[Fri Nov 21 14:39:57.412845 2025] [:error] [pid 25431:tid 25508] [client 134.149.18.28:49781] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ee.php"] [unique_id "aSAJPcklhXxmoIExII3_oAAAAJU"]
[Fri Nov 21 14:39:59.393108 2025] [:error] [pid 25521:tid 25535] [client 134.149.18.28:49680] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ee.php"] [unique_id "aSAJP_hXnBMilDddn3WxaQAAAMw"]
[Fri Nov 21 14:40:02.097785 2025] [:error] [pid 25431:tid 25511] [client 134.149.18.28:43483] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ee.php"] [unique_id "aSAJQsklhXxmoIExII3_pwAAAJg"]
[Fri Nov 21 14:40:03.847824 2025] [:error] [pid 25431:tid 25493] [client 134.149.18.28:49692] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ee.php"] [unique_id "aSAJQ8klhXxmoIExII3_qgAAAIY"]
[Fri Nov 21 14:40:12.128650 2025] [:error] [pid 25430:tid 25467] [client 134.149.18.28:49785] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/product.php"] [unique_id "aSAJTKpnWJcWt_4foXkU3wAAAEc"]
[Fri Nov 21 14:40:18.205019 2025] [:error] [pid 25431:tid 25509] [client 134.149.18.28:49711] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/product.php"] [unique_id "aSAJUsklhXxmoIExII3_xAAAAJY"]
[Fri Nov 21 14:40:22.154368 2025] [:error] [pid 25429:tid 25446] [client 134.149.18.28:49780] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wi.php"] [unique_id "aSAJVj4rZbRSr7vu-NN7SgAAAA0"]
[Fri Nov 21 14:40:28.431242 2025] [:error] [pid 25521:tid 25524] [client 134.149.18.28:49709] File does not exist: /usr/local/apache/htdocs/suspended-page/wi.php
[Fri Nov 21 14:40:28.685433 2025] [:error] [pid 25521:tid 25535] [client 134.149.18.28:49709] File does not exist: /usr/local/apache/htdocs/suspended-page/mms.php
[Fri Nov 21 14:40:28.943175 2025] [:error] [pid 25521:tid 25541] [client 134.149.18.28:49709] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSAJXPhXnBMilDddn3WxnQAAANI"]
[Fri Nov 21 14:40:30.441344 2025] [:error] [pid 25431:tid 25510] [client 134.149.18.28:43948] File does not exist: /usr/local/apache/htdocs/suspended-page/v4.php
[Fri Nov 21 14:40:31.949171 2025] [:error] [pid 25431:tid 25510] [client 134.149.18.28:43948] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php
[Fri Nov 21 14:40:32.225666 2025] [:error] [pid 25431:tid 25489] [client 134.149.18.28:43948] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Nov 21 14:40:32.498262 2025] [:error] [pid 25431:tid 25490] [client 134.149.18.28:43948] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSAJYMklhXxmoIExII3_0gAAAIM"]
[Fri Nov 21 14:40:35.292316 2025] [:error] [pid 25521:tid 25544] [client 134.149.18.28:49763] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSAJY_hXnBMilDddn3WxqQAAANU"]
[Fri Nov 21 14:40:38.642044 2025] [:error] [pid 25554:tid 25568] [client 134.149.18.28:49788] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSAJZh-NtB-9AzFZrk4PdgAAAQo"]
[Fri Nov 21 14:40:41.208339 2025] [:error] [pid 25430:tid 25478] [client 134.149.18.28:49790] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSAJaapnWJcWt_4foXkVAAAAAFI"]
[Fri Nov 21 14:40:42.948183 2025] [:error] [pid 25554:tid 25558] [client 134.149.18.28:49715] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/lock360.php"] [unique_id "aSAJah-NtB-9AzFZrk4PgAAAAQA"]
[Fri Nov 21 14:40:45.186195 2025] [:error] [pid 25521:tid 25540] [client 134.149.18.28:49752] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/lock360.php"] [unique_id "aSAJbfhXnBMilDddn3WxxQAAANE"]
[Fri Nov 21 14:40:47.616170 2025] [:error] [pid 25521:tid 25547] [client 134.149.18.28:43929] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/lock360.php"] [unique_id "aSAJb_hXnBMilDddn3Wx0AAAANg"]
[Fri Nov 21 14:40:54.037213 2025] [:error] [pid 25554:tid 25578] [client 134.149.18.28:49718] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/lock360.php"] [unique_id "aSAJdh-NtB-9AzFZrk4PkwAAARQ"]
[Fri Nov 21 14:40:56.440970 2025] [:error] [pid 25554:tid 25563] [client 134.149.18.28:49671] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSAJeB-NtB-9AzFZrk4PoAAAAQU"]
[Fri Nov 21 14:41:10.464533 2025] [:error] [pid 25521:tid 25542] [client 134.149.18.28:43946] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/po.php"] [unique_id "aSAJhvhXnBMilDddn3Wx9wAAANM"]
[Fri Nov 21 14:41:20.661263 2025] [:error] [pid 25430:tid 25466] [client 134.149.18.28:49772] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/zews.php"] [unique_id "aSAJkKpnWJcWt_4foXkVQAAAAEY"]
[Fri Nov 21 14:41:24.604847 2025] [:error] [pid 25429:tid 25448] [client 134.149.18.28:49670] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/zews.php"] [unique_id "aSAJlD4rZbRSr7vu-NN7ygAAAA8"]
[Fri Nov 21 14:41:29.067077 2025] [:error] [pid 25429:tid 25435] [client 134.149.18.28:49740] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/zews.php"] [unique_id "aSAJmT4rZbRSr7vu-NN70QAAAAI"]
[Fri Nov 21 14:41:38.266615 2025] [:error] [pid 25521:tid 25524] [client 134.149.18.28:43512] File does not exist: /usr/local/apache/htdocs/suspended-page/usage-file.php
[Fri Nov 21 14:41:40.076968 2025] [:error] [pid 25521:tid 25525] [client 134.149.18.28:43512] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/assets/js/wp-config.php"] [unique_id "aSAJpPhXnBMilDddn3WyYwAAAMI"]
[Fri Nov 21 14:41:42.142862 2025] [:error] [pid 25430:tid 25483] [client 134.149.18.28:49684] File does not exist: /usr/local/apache/htdocs/suspended-page/Js.php
[Fri Nov 21 14:41:42.405696 2025] [:error] [pid 25430:tid 25461] [client 134.149.18.28:49684] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Fri Nov 21 14:41:42.661342 2025] [:error] [pid 25430:tid 25468] [client 134.149.18.28:49684] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Nov 21 14:41:42.918108 2025] [:error] [pid 25430:tid 25472] [client 134.149.18.28:49684] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php
[Fri Nov 21 14:41:43.191162 2025] [:error] [pid 25430:tid 25475] [client 134.149.18.28:49684] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Fri Nov 21 14:41:43.721724 2025] [:error] [pid 25430:tid 25483] [client 134.149.18.28:49684] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Nov 21 15:58:03.557703 2025] [:error] [pid 46939:tid 46964] [client 4.233.19.146:8853] [client 4.233.19.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.146, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSAbi-0OmVoxD4VZ_Zlp5QAAAVY"]
[Fri Nov 21 15:58:03.561262 2025] [:error] [pid 46939:tid 46964] [client 4.233.19.146:8853] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 15:58:04.949712 2025] [:error] [pid 25521:tid 25532] [client 4.233.19.146:8847] [client 4.233.19.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.146, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSAbjPhXnBMilDddn3XjswAAAMk"]
[Fri Nov 21 15:58:04.957313 2025] [:error] [pid 25521:tid 25532] [client 4.233.19.146:8847] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 16:25:41.214725 2025] [:error] [pid 25430:tid 25471] [client 180.191.217.166:40504] [client 180.191.217.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.217.166, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aSAiBapnWJcWt_4foXlQoQAAAEs"]
[Fri Nov 21 16:25:41.219704 2025] [:error] [pid 25430:tid 25471] [client 180.191.217.166:40504] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Nov 21 16:35:24.133128 2025] [:error] [pid 46939:tid 46957] [client 134.199.194.68:54556] [client 134.199.194.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.194.68, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSAkTO0OmVoxD4VZ_ZmH5QAAAU8"]
[Fri Nov 21 16:35:24.137609 2025] [:error] [pid 46939:tid 46957] [client 134.199.194.68:54556] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 16:35:25.139740 2025] [:error] [pid 46939:tid 46943] [client 134.199.194.68:54568] [client 134.199.194.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.194.68, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSAkTe0OmVoxD4VZ_ZmH5gAAAUE"]
[Fri Nov 21 16:35:25.145914 2025] [:error] [pid 46939:tid 46943] [client 134.199.194.68:54568] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 17:15:09.604442 2025] [:error] [pid 25554:tid 25577] [client 34.18.91.77:42388] [client 34.18.91.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.18.91.77, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSAtnR-NtB-9AzFZrk5xqgAAARM"]
[Fri Nov 21 17:15:09.608354 2025] [:error] [pid 25554:tid 25577] [client 34.18.91.77:42388] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 17:15:10.752670 2025] [:error] [pid 25431:tid 25489] [client 34.18.91.77:42404] [client 34.18.91.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.18.91.77, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSAtnsklhXxmoIExII1TKwAAAII"]
[Fri Nov 21 17:15:10.758723 2025] [:error] [pid 25431:tid 25489] [client 34.18.91.77:42404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 18:02:06.837209 2025] [:error] [pid 25430:tid 25478] [client 205.185.120.118:39486] [client 205.185.120.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.120.118, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSA4nqpnWJcWt_4foXlpbwAAAFI"]
[Fri Nov 21 18:02:06.841113 2025] [:error] [pid 25430:tid 25478] [client 205.185.120.118:39486] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 18:45:35.295667 2025] [:error] [pid 25430:tid 25476] [client 104.28.240.81:22958] [client 104.28.240.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.81, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSBCz6pnWJcWt_4foXl0FAAAAFA"]
[Fri Nov 21 18:45:35.300958 2025] [:error] [pid 25430:tid 25476] [client 104.28.240.81:22958] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 19:12:45.352606 2025] [:error] [pid 25554:tid 25561] [client 20.71.3.246:5957] [client 20.71.3.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.71.3.246, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSBJLR-NtB-9AzFZrk6SIAAAAQM"]
[Fri Nov 21 19:12:45.356185 2025] [:error] [pid 25554:tid 25561] [client 20.71.3.246:5957] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 19:12:50.438487 2025] [:error] [pid 25430:tid 25476] [client 20.71.3.246:6302] [client 20.71.3.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.71.3.246, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSBJMqpnWJcWt_4foXl6BQAAAFA"]
[Fri Nov 21 19:12:50.445997 2025] [:error] [pid 25430:tid 25476] [client 20.71.3.246:6302] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 20:17:38.140858 2025] [:error] [pid 25431:tid 25490] [client 15.235.159.113:45460] [client 15.235.159.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.159.113, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSBYYsklhXxmoIExII2MfAAAAIM"]
[Fri Nov 21 20:17:38.144898 2025] [:error] [pid 25431:tid 25490] [client 15.235.159.113:45460] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 20:17:38.691497 2025] [:error] [pid 25554:tid 25565] [client 15.235.159.113:45466] [client 15.235.159.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.159.113, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSBYYh-NtB-9AzFZrk6i9wAAAQc"]
[Fri Nov 21 20:17:38.697659 2025] [:error] [pid 25554:tid 25565] [client 15.235.159.113:45466] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 22:23:37.904300 2025] [:error] [pid 25521:tid 25528] [client 43.241.72.57:59498] [client 43.241.72.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.241.72.57, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSB16fhXnBMilDddn3V1HAAAAMU"]
[Fri Nov 21 22:23:37.907847 2025] [:error] [pid 25521:tid 25528] [client 43.241.72.57:59498] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 22:23:38.971880 2025] [:error] [pid 25429:tid 25434] [client 43.241.72.57:59598] [client 43.241.72.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.241.72.57, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSB16j4rZbRSr7vu-NMOCwAAAAE"]
[Fri Nov 21 22:23:38.978175 2025] [:error] [pid 25429:tid 25434] [client 43.241.72.57:59598] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 00:06:13.106633 2025] [:error] [pid 25430:tid 25475] [client 192.250.229.221:40768] [client 192.250.229.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.229.221, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSCN9apnWJcWt_4foXnCaQAAAE8"]
[Sat Nov 22 00:06:13.110294 2025] [:error] [pid 25430:tid 25475] [client 192.250.229.221:40768] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 00:06:14.397135 2025] [:error] [pid 25430:tid 25472] [client 192.250.229.221:40776] [client 192.250.229.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.229.221, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSCN9qpnWJcWt_4foXnCawAAAEw"]
[Sat Nov 22 00:06:14.404839 2025] [:error] [pid 25430:tid 25472] [client 192.250.229.221:40776] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 01:24:07.016373 2025] [:error] [pid 50057:tid 50060] [client 161.35.231.74:33026] [client 161.35.231.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.231.74, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSCgN1b9j9fTBoI0sRVJdwAAAQE"]
[Sat Nov 22 01:24:07.020667 2025] [:error] [pid 50057:tid 50060] [client 161.35.231.74:33026] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 01:24:07.678744 2025] [:error] [pid 50057:tid 50080] [client 161.35.231.74:36386] [client 161.35.231.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.231.74, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSCgN1b9j9fTBoI0sRVJegAAARU"]
[Sat Nov 22 01:24:07.685660 2025] [:error] [pid 50057:tid 50080] [client 161.35.231.74:36386] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 02:20:03.815119 2025] [:error] [pid 9180:tid 9199] [client 103.200.22.140:55858] [client 103.200.22.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.22.140, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSCtU7rk9msixUFV2i-v8QAAAFE"]
[Sat Nov 22 02:20:03.818929 2025] [:error] [pid 9180:tid 9199] [client 103.200.22.140:55858] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 02:20:04.494029 2025] [:error] [pid 9180:tid 9206] [client 103.200.22.140:55862] [client 103.200.22.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.22.140, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSCtVLrk9msixUFV2i-v8wAAAFg"]
[Sat Nov 22 02:20:04.501098 2025] [:error] [pid 9180:tid 9206] [client 103.200.22.140:55862] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 03:50:44.146377 2025] [:error] [pid 53566:tid 53576] [client 211.47.74.55:57797] [client 211.47.74.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.47.74.55, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSDClMbSHDBkRbwMbd7vmQAAAMg"]
[Sat Nov 22 03:50:44.151847 2025] [:error] [pid 53566:tid 53576] [client 211.47.74.55:57797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 03:50:50.409416 2025] [:error] [pid 53479:tid 53537] [client 211.47.74.55:61457] [client 211.47.74.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.47.74.55, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSDCmm6cicFF3Aas-oQ7HAAAAIE"]
[Sat Nov 22 03:50:50.420212 2025] [:error] [pid 53479:tid 53537] [client 211.47.74.55:61457] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 03:53:08.956016 2025] [:error] [pid 53566:tid 53572] [client 103.167.150.158:63370] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/media/system/js/core.js"] [unique_id "aSDDJMbSHDBkRbwMbd7w3AAAAMQ"]
[Sat Nov 22 04:41:37.432336 2025] [:error] [pid 53566:tid 53590] [client 74.208.124.29:46838] [client 74.208.124.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.124.29, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSDOgcbSHDBkRbwMbd4LgwAAANY"]
[Sat Nov 22 04:41:37.437085 2025] [:error] [pid 53566:tid 53590] [client 74.208.124.29:46838] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 04:41:38.244255 2025] [:error] [pid 53566:tid 53581] [client 74.208.124.29:46844] [client 74.208.124.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.124.29, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSDOgsbSHDBkRbwMbd4LhAAAAM0"]
[Sat Nov 22 04:41:38.251457 2025] [:error] [pid 53566:tid 53581] [client 74.208.124.29:46844] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 09:15:07.708218 2025] [:error] [pid 9547:tid 9566] [client 111.172.249.49:42048] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aSEOm9ClOR5qk7DoMeHtkQAAAU0"]
[Sat Nov 22 10:36:52.144949 2025] [:error] [pid 53477:tid 53498] [client 43.157.95.131:38046] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aSEhxH7Lu30Ku9O40aJEUgAAABE"]
[Sat Nov 22 11:50:17.678127 2025] [:error] [pid 25856:tid 25870] [client 222.253.48.28:35520] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSEy-RsTP0wy94zKUvFNfAAAAQw"]
[Sat Nov 22 11:50:17.681899 2025] [:error] [pid 25856:tid 25870] [client 222.253.48.28:35520] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 11:50:19.250703 2025] [:error] [pid 53477:tid 53500] [client 222.253.48.28:35522] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSEy-37Lu30Ku9O40aJXmAAAABM"]
[Sat Nov 22 11:50:19.258060 2025] [:error] [pid 53477:tid 53500] [client 222.253.48.28:35522] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 13:02:34.276495 2025] [:error] [pid 9547:tid 9575] [client 117.52.74.20:39092] [client 117.52.74.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.52.74.20, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSFD6tClOR5qk7DoMeFCuwAAAVY"]
[Sat Nov 22 13:02:34.280071 2025] [:error] [pid 9547:tid 9575] [client 117.52.74.20:39092] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 13:02:35.221268 2025] [:error] [pid 53479:tid 53556] [client 117.52.74.20:39156] [client 117.52.74.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.52.74.20, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSFD626cicFF3Aas-oQOEAAAAJQ"]
[Sat Nov 22 13:02:35.230279 2025] [:error] [pid 53479:tid 53556] [client 117.52.74.20:39156] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 13:44:39.382235 2025] [:error] [pid 53566:tid 53570] [client 103.249.81.106:26431] [client 103.249.81.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.81.106, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aSFNx8bSHDBkRbwMbd7i_QAAAMI"]
[Sat Nov 22 13:44:39.388401 2025] [:error] [pid 53566:tid 53570] [client 103.249.81.106:26431] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Nov 22 17:42:48.630506 2025] [:error] [pid 44259:tid 44281] [client 161.35.231.74:40828] [client 161.35.231.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.231.74, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSGFmHXe1xL-_YOdRmRULQAAAZM"]
[Sat Nov 22 17:42:48.635207 2025] [:error] [pid 44259:tid 44281] [client 161.35.231.74:40828] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 17:42:49.291429 2025] [:error] [pid 44259:tid 44286] [client 161.35.231.74:40832] [client 161.35.231.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.231.74, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSGFmXXe1xL-_YOdRmRULgAAAZg"]
[Sat Nov 22 17:42:49.297692 2025] [:error] [pid 44259:tid 44286] [client 161.35.231.74:40832] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 19:45:51.257483 2025] [:error] [pid 25856:tid 25876] [client 160.30.252.37:54602] [client 160.30.252.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.30.252.37, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSGibxsTP0wy94zKUvHOswAAARI"]
[Sat Nov 22 19:45:51.261423 2025] [:error] [pid 25856:tid 25876] [client 160.30.252.37:54602] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 19:45:53.921514 2025] [:error] [pid 53479:tid 53539] [client 160.30.252.37:54604] [client 160.30.252.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.30.252.37, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSGicW6cicFF3Aas-oSnGAAAAIM"]
[Sat Nov 22 19:45:53.927874 2025] [:error] [pid 53479:tid 53539] [client 160.30.252.37:54604] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 00:42:17.092235 2025] [:error] [pid 39713:tid 39724] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Nov 23 00:42:17.464005 2025] [:error] [pid 39713:tid 39736] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Nov 23 00:42:17.933877 2025] [:error] [pid 39713:tid 39726] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Nov 23 00:42:18.298307 2025] [:error] [pid 39713:tid 39731] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Nov 23 00:42:18.640421 2025] [:error] [pid 39713:tid 39744] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Nov 23 00:42:19.087971 2025] [:error] [pid 39713:tid 39743] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Nov 23 00:42:19.445384 2025] [:error] [pid 39713:tid 39742] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Nov 23 00:42:19.855751 2025] [:error] [pid 39713:tid 39745] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 23 00:42:20.540736 2025] [:error] [pid 39713:tid 39740] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Nov 23 00:42:21.233405 2025] [:error] [pid 39713:tid 39721] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Nov 23 00:42:21.631528 2025] [:error] [pid 39713:tid 39727] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Nov 23 00:42:21.980324 2025] [:error] [pid 39713:tid 39739] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Nov 23 00:42:22.323335 2025] [:error] [pid 39713:tid 39734] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Nov 23 00:42:22.681280 2025] [:error] [pid 39713:tid 39735] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Nov 23 00:42:23.045202 2025] [:error] [pid 39713:tid 39724] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Nov 23 00:42:23.846387 2025] [:error] [pid 39713:tid 39724] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Nov 23 00:42:24.185456 2025] [:error] [pid 39713:tid 39736] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Nov 23 00:42:24.561223 2025] [:error] [pid 39713:tid 39726] [client 216.73.163.142:44517] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Nov 23 00:42:30.098601 2025] [:error] [pid 39713:tid 39739] [client 216.73.163.142:44517] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSHn9kUgrb325CIAjPqGFwAAABI"]
[Sun Nov 23 00:42:31.976485 2025] [:error] [pid 39713:tid 39742] [client 45.146.54.137:55615] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSHn90Ugrb325CIAjPqGHgAAABU"]
[Sun Nov 23 00:42:33.788109 2025] [:error] [pid 39713:tid 39741] [client 216.73.163.122:62653] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Nov 23 00:42:34.862519 2025] [:error] [pid 39713:tid 39736] [client 216.73.163.122:62653] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "jandakotpilotshop.com"] [uri "/tinyfilemanager.php"] [unique_id "aSHn-kUgrb325CIAjPqGLAAAAA8"]
[Sun Nov 23 00:42:36.292291 2025] [:error] [pid 8816:tid 8901] [client 216.73.163.118:48265] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Nov 23 00:42:36.645388 2025] [:error] [pid 8816:tid 8897] [client 216.73.163.118:48265] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSHn_Jb4RIAN-_BXnHlB3AAAAIw"]
[Sun Nov 23 00:42:37.767704 2025] [:error] [pid 39942:tid 40016] [client 216.73.163.130:30235] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Nov 23 00:42:39.577641 2025] [:error] [pid 39942:tid 40008] [client 216.73.163.130:30235] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSHn_6NupsOsQf9D2gxE7AAAAU0"]
[Sun Nov 23 00:42:40.731486 2025] [:error] [pid 39713:tid 39736] [client 45.131.194.122:28741] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSHoAEUgrb325CIAjPqGOQAAAA8"]
[Sun Nov 23 00:42:41.439031 2025] [:error] [pid 39719:tid 39784] [client 216.73.163.154:32417] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSHoARmP4k0tY5Yex-W1pwAAAQg"]
[Sun Nov 23 00:42:42.266682 2025] [:error] [pid 39719:tid 39776] [client 216.73.163.121:62405] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSHoAhmP4k0tY5Yex-W1qAAAAQA"]
[Sun Nov 23 00:42:42.975661 2025] [:error] [pid 39942:tid 40011] [client 216.73.163.130:57167] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSHoAqNupsOsQf9D2gxE7wAAAVA"]
[Sun Nov 23 00:42:43.684569 2025] [:error] [pid 39719:tid 39782] [client 216.73.163.157:37271] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSHoAxmP4k0tY5Yex-W1rgAAAQY"]
[Sun Nov 23 00:42:45.302536 2025] [:error] [pid 39718:tid 39773] [client 216.73.163.121:23599] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSHoBQQ3B_uDoeItNmNWggAAAFg"]
[Sun Nov 23 00:42:46.119292 2025] [:error] [pid 39713:tid 39729] [client 216.73.163.129:61015] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Nov 23 00:42:46.866829 2025] [:error] [pid 39713:tid 39737] [client 216.73.163.129:61015] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "jandakotpilotshop.com"] [uri "/filemanager.php"] [unique_id "aSHoBkUgrb325CIAjPqGQAAAABA"]
[Sun Nov 23 00:42:48.398369 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.156:21191] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSHoCJb4RIAN-_BXnHlB7QAAAI8"]
[Sun Nov 23 00:42:49.517492 2025] [:error] [pid 8816:tid 8904] [client 216.73.163.119:26369] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSHoCZb4RIAN-_BXnHlB8gAAAJM"]
[Sun Nov 23 00:42:50.259448 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.148:28787] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Nov 23 00:42:50.629476 2025] [:error] [pid 8816:tid 8901] [client 216.73.163.148:28787] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSHoCpb4RIAN-_BXnHlB9gAAAJA"]
[Sun Nov 23 00:42:52.355604 2025] [:error] [pid 39719:tid 39800] [client 45.146.54.135:64679] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Nov 23 00:42:53.435609 2025] [:error] [pid 39719:tid 39777] [client 45.146.54.135:64679] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Nov 23 00:42:54.473320 2025] [:error] [pid 39719:tid 39790] [client 45.146.54.135:64679] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSHoDhmP4k0tY5Yex-W1xQAAAQ4"]
[Sun Nov 23 00:42:55.285346 2025] [:error] [pid 39713:tid 39734] [client 216.73.163.159:20015] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Nov 23 00:42:55.624715 2025] [:error] [pid 39713:tid 39731] [client 216.73.163.159:20015] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSHoD0Ugrb325CIAjPqGSAAAAAo"]
[Sun Nov 23 00:42:56.404038 2025] [:error] [pid 39942:tid 39997] [client 45.146.54.132:27899] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Nov 23 00:42:57.191106 2025] [:error] [pid 39942:tid 40010] [client 45.146.54.132:27899] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/defaults.php"] [unique_id "aSHoEaNupsOsQf9D2gxFIAAAAU8"]
[Sun Nov 23 00:42:58.352474 2025] [:error] [pid 39942:tid 40017] [client 216.73.163.117:40331] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSHoEqNupsOsQf9D2gxFIwAAAVY"]
[Sun Nov 23 00:42:59.490196 2025] [:error] [pid 39718:tid 39752] [client 45.146.54.135:50701] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Nov 23 00:42:59.832925 2025] [:error] [pid 39718:tid 39757] [client 45.146.54.135:50701] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Nov 23 00:43:00.614596 2025] [:error] [pid 39718:tid 39772] [client 45.146.54.135:50701] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSHoFAQ3B_uDoeItNmNWmAAAAFc"]
[Sun Nov 23 00:43:01.738965 2025] [:error] [pid 39942:tid 40016] [client 216.73.163.140:37425] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSHoFaNupsOsQf9D2gxFNAAAAVU"]
[Sun Nov 23 00:43:02.778880 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.132:42941] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSHoFpb4RIAN-_BXnHlCAgAAAIk"]
[Sun Nov 23 00:43:03.606294 2025] [:error] [pid 39942:tid 40011] [client 45.146.54.134:52903] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSHoF6NupsOsQf9D2gxFOwAAAVA"]
[Sun Nov 23 00:43:04.293361 2025] [:error] [pid 39718:tid 39771] [client 216.73.163.122:28585] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSHoGAQ3B_uDoeItNmNWmgAAAFY"]
[Sun Nov 23 00:43:05.752064 2025] [:error] [pid 8816:tid 8904] [client 216.73.163.116:20673] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Nov 23 00:43:06.133851 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.116:20673] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aSHoGpb4RIAN-_BXnHlCBwAAAIA"]
[Sun Nov 23 00:43:06.854248 2025] [:error] [pid 39718:tid 39767] [client 45.131.194.123:29889] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class.api.php"] [unique_id "aSHoGgQ3B_uDoeItNmNWnAAAAFI"]
[Sun Nov 23 00:43:07.657289 2025] [:error] [pid 39713:tid 39733] [client 216.73.163.135:48849] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSHoG0Ugrb325CIAjPqGUQAAAAw"]
[Sun Nov 23 00:43:09.077818 2025] [:error] [pid 39719:tid 39795] [client 216.73.163.152:20189] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Nov 23 00:43:09.785063 2025] [:error] [pid 39719:tid 39789] [client 216.73.163.152:20189] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Nov 23 00:43:11.245350 2025] [:error] [pid 39719:tid 39779] [client 216.73.163.152:20189] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/admin.php"] [unique_id "aSHoHxmP4k0tY5Yex-W14AAAAQM"]
[Sun Nov 23 00:43:13.197708 2025] [:error] [pid 39719:tid 39782] [client 216.73.163.135:28447] [client 216.73.163.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.135, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSHoIRmP4k0tY5Yex-W15QAAAQY"]
[Sun Nov 23 00:43:13.545057 2025] [:error] [pid 39719:tid 39780] [client 216.73.163.135:28447] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Nov 23 00:43:15.391802 2025] [:error] [pid 39719:tid 39786] [client 216.73.163.135:28447] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Nov 23 00:43:15.732713 2025] [:error] [pid 39719:tid 39791] [client 216.73.163.135:28447] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Nov 23 00:43:17.537965 2025] [:error] [pid 39719:tid 39777] [client 216.73.163.135:28447] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSHoJRmP4k0tY5Yex-W19QAAAQE"]
[Sun Nov 23 00:43:18.620798 2025] [:error] [pid 8816:tid 8898] [client 216.73.163.146:44801] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Nov 23 00:43:19.036114 2025] [:error] [pid 8816:tid 8888] [client 216.73.163.146:44801] [client 216.73.163.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.146, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSHoJ5b4RIAN-_BXnHlCFgAAAIQ"]
[Sun Nov 23 00:43:19.742616 2025] [:error] [pid 8816:tid 8889] [client 216.73.163.146:44801] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/item.php"] [unique_id "aSHoJ5b4RIAN-_BXnHlCGQAAAIU"]
[Sun Nov 23 00:43:21.967434 2025] [:error] [pid 39718:tid 39759] [client 216.73.163.130:48769] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Nov 23 00:43:22.700241 2025] [:error] [pid 39718:tid 39755] [client 216.73.163.130:48769] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sun Nov 23 00:43:23.457678 2025] [:error] [pid 39718:tid 39773] [client 216.73.163.130:48769] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSHoKwQ3B_uDoeItNmNWrAAAAFg"]
[Sun Nov 23 00:43:24.170838 2025] [:error] [pid 39942:tid 40009] [client 216.73.163.151:56993] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Nov 23 00:43:25.232851 2025] [:error] [pid 39942:tid 40014] [client 216.73.163.151:56993] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Nov 23 00:43:25.913505 2025] [:error] [pid 39942:tid 39995] [client 216.73.163.151:56993] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Nov 23 00:43:26.595016 2025] [:error] [pid 39942:tid 40017] [client 216.73.163.151:56993] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Nov 23 00:43:26.930154 2025] [:error] [pid 39942:tid 40011] [client 216.73.163.151:56993] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSHoLqNupsOsQf9D2gxFxgAAAVA"]
[Sun Nov 23 00:43:27.622752 2025] [:error] [pid 39718:tid 39753] [client 216.73.163.137:59735] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Nov 23 00:43:27.962294 2025] [:error] [pid 39718:tid 39758] [client 216.73.163.137:59735] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Nov 23 00:43:28.363461 2025] [:error] [pid 39718:tid 39771] [client 216.73.163.137:59735] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSHoMAQ3B_uDoeItNmNWvgAAAFY"]
[Sun Nov 23 00:43:29.378946 2025] [:error] [pid 39719:tid 39783] [client 45.131.194.123:62719] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Nov 23 00:43:30.055647 2025] [:error] [pid 39719:tid 39782] [client 45.131.194.123:62719] [client 45.131.194.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.123, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aSHoMhmP4k0tY5Yex-W2AAAAAQY"]
[Sun Nov 23 00:43:30.398889 2025] [:error] [pid 39719:tid 39793] [client 45.131.194.123:62719] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSHoMhmP4k0tY5Yex-W2AgAAARE"]
[Sun Nov 23 00:43:34.607283 2025] [:error] [pid 8816:tid 8887] [client 216.73.163.145:32881] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Nov 23 00:43:36.787937 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.145:32881] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Nov 23 00:43:37.183301 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.145:32881] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSHoOZb4RIAN-_BXnHlCWgAAAI8"]
[Sun Nov 23 00:43:39.973329 2025] [:error] [pid 8816:tid 8891] [client 216.73.163.143:33305] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Nov 23 00:43:41.654400 2025] [:error] [pid 8816:tid 8905] [client 216.73.163.143:33305] [client 216.73.163.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.143, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSHoPZb4RIAN-_BXnHlCYQAAAJQ"]
[Sun Nov 23 00:43:42.111491 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.143:33305] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Nov 23 00:43:42.452731 2025] [:error] [pid 8816:tid 8885] [client 216.73.163.143:33305] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sun Nov 23 00:43:42.803835 2025] [:error] [pid 8816:tid 8886] [client 216.73.163.143:33305] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Nov 23 00:43:43.180572 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.143:33305] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSHoP5b4RIAN-_BXnHlCaQAAAIk"]
[Sun Nov 23 00:43:44.895467 2025] [:error] [pid 8816:tid 8907] [client 45.146.54.136:47137] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Nov 23 00:43:45.311730 2025] [:error] [pid 8816:tid 8889] [client 45.146.54.136:47137] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/infi.php"] [unique_id "aSHoQZb4RIAN-_BXnHlCcQAAAIU"]
[Sun Nov 23 00:43:46.367687 2025] [:error] [pid 39719:tid 39781] [client 45.146.54.133:63299] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Nov 23 00:43:46.713419 2025] [:error] [pid 39719:tid 39794] [client 45.146.54.133:63299] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSHoQhmP4k0tY5Yex-W2GAAAARI"]
[Sun Nov 23 00:43:48.901709 2025] [:error] [pid 39719:tid 39791] [client 216.73.163.148:49097] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sun Nov 23 00:43:49.240358 2025] [:error] [pid 39719:tid 39777] [client 216.73.163.148:49097] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSHoRRmP4k0tY5Yex-W2IAAAAQE"]
[Sun Nov 23 00:43:50.031596 2025] [:error] [pid 39713:tid 39736] [client 216.73.163.134:39319] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSHoRkUgrb325CIAjPqGfQAAAA8"]
[Sun Nov 23 00:43:50.745145 2025] [:error] [pid 39718:tid 39752] [client 216.73.163.142:37893] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Nov 23 00:43:51.102467 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.142:37893] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sun Nov 23 00:43:52.593901 2025] [:error] [pid 39718:tid 39753] [client 216.73.163.142:37893] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSHoSAQ3B_uDoeItNmNW7QAAAEQ"]
[Sun Nov 23 00:43:53.759405 2025] [:error] [pid 39718:tid 39757] [client 216.73.163.156:50785] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSHoSQQ3B_uDoeItNmNW8QAAAEg"]
[Sun Nov 23 00:43:56.585917 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.135:65139] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/edit.php"] [unique_id "aSHoTJb4RIAN-_BXnHlCiwAAAIA"]
[Sun Nov 23 00:43:57.271080 2025] [:error] [pid 39718:tid 39760] [client 45.146.54.132:24295] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sun Nov 23 00:43:57.984251 2025] [:error] [pid 39718:tid 39762] [client 45.146.54.132:24295] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sun Nov 23 00:43:58.336902 2025] [:error] [pid 39718:tid 39764] [client 45.146.54.132:24295] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSHoTgQ3B_uDoeItNmNXAwAAAE8"]
[Sun Nov 23 00:43:59.044866 2025] [:error] [pid 8816:tid 8886] [client 216.73.163.158:41265] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Nov 23 00:43:59.733529 2025] [:error] [pid 8816:tid 8896] [client 216.73.163.158:41265] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/click.php"] [unique_id "aSHoT5b4RIAN-_BXnHlCnAAAAIs"]
[Sun Nov 23 00:44:01.511439 2025] [:error] [pid 39719:tid 39777] [client 216.73.163.135:56007] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSHoURmP4k0tY5Yex-W2OwAAAQE"]
[Sun Nov 23 00:44:02.534370 2025] [:error] [pid 8816:tid 8885] [client 216.73.163.155:31411] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Nov 23 00:44:03.626691 2025] [:error] [pid 8816:tid 8896] [client 216.73.163.155:31411] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Nov 23 00:44:04.371006 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.155:31411] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Nov 23 00:44:04.811741 2025] [:error] [pid 8816:tid 8902] [client 216.73.163.155:31411] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSHoVJb4RIAN-_BXnHlCsAAAAJE"]
[Sun Nov 23 00:44:05.570306 2025] [:error] [pid 39718:tid 39754] [client 216.73.163.120:28999] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aSHoVQQ3B_uDoeItNmNXFAAAAEU"]
[Sun Nov 23 00:44:06.340839 2025] [:error] [pid 39942:tid 40017] [client 216.73.163.116:54933] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSHoVqNupsOsQf9D2gxGpgAAAVY"]
[Sun Nov 23 00:44:07.168243 2025] [:error] [pid 39713:tid 39740] [client 216.73.163.143:63855] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSHoV0Ugrb325CIAjPqGrgAAABM"]
[Sun Nov 23 00:44:09.406745 2025] [:error] [pid 39713:tid 39733] [client 216.73.163.150:20803] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Nov 23 00:44:09.759607 2025] [:error] [pid 39713:tid 39741] [client 216.73.163.150:20803] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSHoWUUgrb325CIAjPqGtgAAABQ"]
[Sun Nov 23 00:44:10.531674 2025] [:error] [pid 39719:tid 39780] [client 216.73.163.159:25963] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSHoWhmP4k0tY5Yex-W2TgAAAQQ"]
[Sun Nov 23 00:44:11.266412 2025] [:error] [pid 39942:tid 40001] [client 45.146.54.133:32787] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Nov 23 00:44:11.968176 2025] [:error] [pid 39942:tid 40007] [client 45.146.54.133:32787] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/index.php"] [unique_id "aSHoW6NupsOsQf9D2gxGuAAAAUw"]
[Sun Nov 23 00:44:12.700693 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.136:29495] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSHoXJb4RIAN-_BXnHlCxgAAAJU"]
[Sun Nov 23 00:44:13.505386 2025] [:error] [pid 39719:tid 39784] [client 216.73.163.136:50757] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSHoXRmP4k0tY5Yex-W2UwAAAQg"]
[Sun Nov 23 00:44:14.196575 2025] [:error] [pid 39713:tid 39736] [client 216.73.163.133:33341] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSHoXkUgrb325CIAjPqGvwAAAA8"]
[Sun Nov 23 00:44:15.278630 2025] [:error] [pid 39713:tid 39722] [client 216.73.163.148:30319] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSHoX0Ugrb325CIAjPqGwwAAAAE"]
[Sun Nov 23 00:44:16.681898 2025] [:error] [pid 39942:tid 39998] [client 216.73.163.141:33743] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSHoYKNupsOsQf9D2gxGyQAAAUM"]
[Sun Nov 23 00:44:17.400668 2025] [:error] [pid 39719:tid 39778] [client 216.73.163.118:23695] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Nov 23 00:44:18.510161 2025] [:error] [pid 39719:tid 39790] [client 216.73.163.118:23695] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Nov 23 00:44:18.871963 2025] [:error] [pid 39719:tid 39793] [client 216.73.163.118:23695] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSHoYhmP4k0tY5Yex-W2XgAAARE"]
[Sun Nov 23 00:44:19.969844 2025] [:error] [pid 8816:tid 8892] [client 216.73.163.151:27651] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sun Nov 23 00:44:20.365051 2025] [:error] [pid 8816:tid 8885] [client 216.73.163.151:27651] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Nov 23 00:44:22.780718 2025] [:error] [pid 8816:tid 8897] [client 216.73.163.151:27651] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aSHoZpb4RIAN-_BXnHlC1wAAAIw"]
[Sun Nov 23 00:44:24.594969 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.118:31643] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSHoaJb4RIAN-_BXnHlC3AAAAIA"]
[Sun Nov 23 00:44:25.274401 2025] [:error] [pid 39713:tid 39729] [client 216.73.163.158:52527] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSHoaUUgrb325CIAjPqGyQAAAAg"]
[Sun Nov 23 00:44:27.575727 2025] [:error] [pid 39718:tid 39758] [client 216.73.163.136:38715] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSHoawQ3B_uDoeItNmNXNgAAAEk"]
[Sun Nov 23 00:44:29.060303 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.152:47243] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Nov 23 00:44:29.402498 2025] [:error] [pid 39718:tid 39768] [client 216.73.163.152:47243] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sun Nov 23 00:44:29.794556 2025] [:error] [pid 39718:tid 39771] [client 216.73.163.152:47243] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sun Nov 23 00:44:30.137895 2025] [:error] [pid 39718:tid 39761] [client 216.73.163.152:47243] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sun Nov 23 00:44:32.438567 2025] [:error] [pid 39718:tid 39760] [client 216.73.163.152:47243] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSHocAQ3B_uDoeItNmNXQgAAAEs"]
[Sun Nov 23 00:44:33.208651 2025] [:error] [pid 39718:tid 39757] [client 216.73.163.151:38677] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSHocQQ3B_uDoeItNmNXRAAAAEg"]
[Sun Nov 23 00:44:33.934232 2025] [:error] [pid 39718:tid 39755] [client 216.73.163.144:51279] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSHocQQ3B_uDoeItNmNXRgAAAEY"]
[Sun Nov 23 00:44:34.654440 2025] [:error] [pid 39719:tid 39787] [client 45.146.54.138:64831] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSHochmP4k0tY5Yex-W2bAAAAQs"]
[Sun Nov 23 00:44:35.370533 2025] [:error] [pid 39719:tid 39799] [client 216.73.163.118:34607] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSHocxmP4k0tY5Yex-W2bwAAARc"]
[Sun Nov 23 00:44:36.051157 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.116:43641] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSHodJb4RIAN-_BXnHlC5wAAAJI"]
[Sun Nov 23 00:44:37.143405 2025] [:error] [pid 39713:tid 39722] [client 216.73.163.156:56219] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSHodUUgrb325CIAjPqGzgAAAAE"]
[Sun Nov 23 00:44:37.875824 2025] [:error] [pid 8816:tid 8904] [client 216.73.163.122:50883] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSHodZb4RIAN-_BXnHlC6wAAAJM"]
[Sun Nov 23 00:44:38.652416 2025] [:error] [pid 39942:tid 39995] [client 216.73.163.117:61647] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSHodqNupsOsQf9D2gxHEgAAAUE"]
[Sun Nov 23 00:44:40.373217 2025] [:error] [pid 39942:tid 40005] [client 216.73.163.155:52341] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSHoeKNupsOsQf9D2gxHFwAAAUo"]
[Sun Nov 23 00:44:41.879533 2025] [:error] [pid 39719:tid 39799] [client 45.146.54.137:43039] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSHoeRmP4k0tY5Yex-W2fQAAARc"]
[Sun Nov 23 00:44:43.022003 2025] [:error] [pid 39719:tid 39788] [client 45.131.194.122:43701] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSHoexmP4k0tY5Yex-W2ggAAAQw"]
[Sun Nov 23 00:44:43.768903 2025] [:error] [pid 8816:tid 8891] [client 216.73.163.144:47541] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Nov 23 00:44:44.471224 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.144:47541] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSHofJb4RIAN-_BXnHlC8QAAAJI"]
[Sun Nov 23 00:44:46.790445 2025] [:error] [pid 39942:tid 40005] [client 45.131.194.122:40753] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/about.php"] [unique_id "aSHofqNupsOsQf9D2gxHKAAAAUo"]
[Sun Nov 23 00:44:50.138378 2025] [:error] [pid 8816:tid 8908] [client 216.73.163.147:58127] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Nov 23 00:44:50.689758 2025] [:error] [pid 8816:tid 8908] [client 216.73.163.147:58127] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSHogpb4RIAN-_BXnHlC9wAAAJc"]
[Sun Nov 23 00:44:51.804912 2025] [:error] [pid 39719:tid 39793] [client 216.73.163.146:23555] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Nov 23 00:44:52.167351 2025] [:error] [pid 39719:tid 39797] [client 216.73.163.146:23555] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Nov 23 00:44:52.513224 2025] [:error] [pid 39719:tid 39786] [client 216.73.163.146:23555] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sun Nov 23 00:44:52.907720 2025] [:error] [pid 39719:tid 39790] [client 216.73.163.146:23555] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSHohBmP4k0tY5Yex-W2mQAAAQ4"]
[Sun Nov 23 00:44:53.656401 2025] [:error] [pid 39718:tid 39766] [client 216.73.163.131:51587] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sun Nov 23 00:44:54.014435 2025] [:error] [pid 39718:tid 39770] [client 216.73.163.131:51587] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSHohgQ3B_uDoeItNmNXUQAAAFU"]
[Sun Nov 23 00:44:56.532756 2025] [:error] [pid 39942:tid 39995] [client 216.73.163.134:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Nov 23 00:44:56.910492 2025] [:error] [pid 39942:tid 40009] [client 216.73.163.134:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Nov 23 00:44:57.296213 2025] [:error] [pid 39942:tid 40008] [client 216.73.163.134:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Sun Nov 23 00:44:59.106093 2025] [:error] [pid 39942:tid 40014] [client 216.73.163.134:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sun Nov 23 00:44:59.503050 2025] [:error] [pid 39942:tid 40000] [client 216.73.163.134:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Nov 23 00:45:01.354108 2025] [:error] [pid 39942:tid 39994] [client 216.73.163.134:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sun Nov 23 00:45:02.865331 2025] [:error] [pid 39942:tid 39999] [client 216.73.163.134:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Nov 23 00:45:03.206096 2025] [:error] [pid 39942:tid 40001] [client 216.73.163.134:42701] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSHoj6NupsOsQf9D2gxHWAAAAUY"]
[Sun Nov 23 00:45:03.967564 2025] [:error] [pid 39718:tid 39755] [client 216.73.163.136:33595] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSHojwQ3B_uDoeItNmNXXwAAAEY"]
[Sun Nov 23 00:45:04.659810 2025] [:error] [pid 39942:tid 40004] [client 216.73.163.152:47131] [client 216.73.163.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.152, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSHokKNupsOsQf9D2gxHWwAAAUk"]
[Sun Nov 23 00:45:04.666121 2025] [:error] [pid 39942:tid 40004] [client 216.73.163.152:47131] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 00:45:05.011662 2025] [:error] [pid 39942:tid 40006] [client 216.73.163.152:47131] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Nov 23 00:45:05.357643 2025] [:error] [pid 39942:tid 40007] [client 216.73.163.152:47131] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSHokaNupsOsQf9D2gxHXwAAAUw"]
[Sun Nov 23 00:45:06.501816 2025] [:error] [pid 39719:tid 39796] [client 216.73.163.116:42927] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Nov 23 00:45:06.949145 2025] [:error] [pid 39719:tid 39794] [client 216.73.163.116:42927] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSHokhmP4k0tY5Yex-W2qQAAARI"]
[Sun Nov 23 00:45:07.634720 2025] [:error] [pid 39713:tid 39731] [client 45.146.54.130:63157] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSHok0Ugrb325CIAjPqG9gAAAAo"]
[Sun Nov 23 00:45:11.492860 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.120:58927] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSHol5b4RIAN-_BXnHlDGwAAAI8"]
[Sun Nov 23 00:45:12.191363 2025] [:error] [pid 39718:tid 39757] [client 216.73.163.133:33033] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "jandakotpilotshop.com"] [uri "/fm.php"] [unique_id "aSHomAQ3B_uDoeItNmNXZwAAAEg"]
[Sun Nov 23 00:45:13.980916 2025] [:error] [pid 8816:tid 8904] [client 216.73.163.155:36871] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Nov 23 00:45:14.710413 2025] [:error] [pid 8816:tid 8901] [client 216.73.163.155:36871] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSHompb4RIAN-_BXnHlDNwAAAJA"]
[Sun Nov 23 00:45:16.130425 2025] [:error] [pid 39719:tid 39789] [client 45.146.54.135:50841] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sun Nov 23 00:45:16.869461 2025] [:error] [pid 39719:tid 39781] [client 45.146.54.135:50841] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/function.php"] [unique_id "aSHonBmP4k0tY5Yex-W2wQAAAQU"]
[Sun Nov 23 00:45:17.559200 2025] [:error] [pid 8816:tid 8900] [client 45.146.54.131:30159] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/plugins.php"] [unique_id "aSHonZb4RIAN-_BXnHlDOwAAAI8"]
[Sun Nov 23 00:45:18.715301 2025] [:error] [pid 39719:tid 39797] [client 216.73.163.119:20203] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Nov 23 00:45:19.086072 2025] [:error] [pid 39719:tid 39795] [client 216.73.163.119:20203] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSHonxmP4k0tY5Yex-W2xgAAARM"]
[Sun Nov 23 00:45:19.860505 2025] [:error] [pid 39713:tid 39737] [client 216.73.163.149:56201] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSHon0Ugrb325CIAjPqHCAAAABA"]
[Sun Nov 23 00:45:21.371164 2025] [:error] [pid 39718:tid 39754] [client 45.146.54.132:59827] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sun Nov 23 00:45:21.982273 2025] [:error] [pid 39718:tid 39750] [client 45.146.54.132:59827] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Nov 23 00:45:22.728191 2025] [:error] [pid 39718:tid 39773] [client 45.146.54.132:59827] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Nov 23 00:45:23.433129 2025] [:error] [pid 39718:tid 39767] [client 45.146.54.132:59827] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aSHoowQ3B_uDoeItNmNXhAAAAFI"]
[Sun Nov 23 00:45:24.163059 2025] [:error] [pid 39719:tid 39792] [client 216.73.163.155:52081] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSHopBmP4k0tY5Yex-W2zQAAARA"]
[Sun Nov 23 00:45:26.433657 2025] [:error] [pid 39713:tid 39724] [client 216.73.163.158:30543] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Nov 23 00:45:26.772060 2025] [:error] [pid 39713:tid 39726] [client 216.73.163.158:30543] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/index.php"] [unique_id "aSHopkUgrb325CIAjPqHEQAAAAU"]
[Sun Nov 23 00:45:27.482690 2025] [:error] [pid 8816:tid 8891] [client 216.73.163.129:50447] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSHop5b4RIAN-_BXnHlDQwAAAIc"]
[Sun Nov 23 00:45:28.162053 2025] [:error] [pid 39942:tid 40002] [client 45.146.54.136:23229] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSHoqKNupsOsQf9D2gxHigAAAUc"]
[Sun Nov 23 00:45:30.472214 2025] [:error] [pid 8816:tid 8888] [client 45.131.194.122:32775] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Sun Nov 23 00:45:30.838299 2025] [:error] [pid 8816:tid 8892] [client 45.131.194.122:32775] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSHoqpb4RIAN-_BXnHlDSwAAAIg"]
[Sun Nov 23 00:45:31.931795 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.155:49113] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSHoq5b4RIAN-_BXnHlDTwAAAIY"]
[Sun Nov 23 00:45:32.686438 2025] [:error] [pid 39942:tid 40019] [client 45.146.54.135:40001] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Nov 23 00:45:33.084697 2025] [:error] [pid 39942:tid 39994] [client 45.146.54.135:40001] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Nov 23 00:45:33.795322 2025] [:error] [pid 39942:tid 39995] [client 45.146.54.135:40001] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sun Nov 23 00:45:35.722849 2025] [:error] [pid 39942:tid 40001] [client 45.146.54.135:40001] [client 45.146.54.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.135, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/js/wp-login.php"] [unique_id "aSHor6NupsOsQf9D2gxHogAAAUY"]
[Sun Nov 23 00:45:36.501413 2025] [:error] [pid 39942:tid 40005] [client 45.146.54.135:40001] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Nov 23 00:45:36.950877 2025] [:error] [pid 39942:tid 40016] [client 45.146.54.135:40001] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sun Nov 23 00:45:37.337095 2025] [:error] [pid 39942:tid 40011] [client 45.146.54.135:40001] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sun Nov 23 00:45:38.042058 2025] [:error] [pid 39942:tid 40006] [client 45.146.54.135:40001] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSHosqNupsOsQf9D2gxHrQAAAUs"]
[Sun Nov 23 00:45:38.719327 2025] [:error] [pid 8816:tid 8897] [client 216.73.163.116:35347] [client 216.73.163.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.116, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSHospb4RIAN-_BXnHlDWAAAAIw"]
[Sun Nov 23 00:45:39.908890 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.116:35347] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Nov 23 00:45:40.760991 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.116:35347] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sun Nov 23 00:45:41.513792 2025] [:error] [pid 8816:tid 8907] [client 216.73.163.116:35347] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sun Nov 23 00:45:43.227210 2025] [:error] [pid 8816:tid 8908] [client 216.73.163.116:35347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sun Nov 23 00:45:44.370239 2025] [:error] [pid 8816:tid 8886] [client 216.73.163.116:35347] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sun Nov 23 00:45:47.442812 2025] [:error] [pid 8816:tid 8897] [client 216.73.163.116:35347] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Nov 23 00:45:47.816439 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.116:35347] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Sun Nov 23 00:45:49.655379 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.116:35347] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Nov 23 00:45:50.419287 2025] [:error] [pid 8816:tid 8896] [client 216.73.163.116:35347] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aSHovpb4RIAN-_BXnHlDfwAAAIs"]
[Sun Nov 23 00:45:53.357230 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.143:58919] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Nov 23 00:45:53.695968 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.143:58919] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSHowZb4RIAN-_BXnHlDhgAAAIk"]
[Sun Nov 23 00:45:54.758926 2025] [:error] [pid 8816:tid 8891] [client 45.146.54.137:45643] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sun Nov 23 00:45:55.099016 2025] [:error] [pid 8816:tid 8890] [client 45.146.54.137:45643] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSHow5b4RIAN-_BXnHlDkgAAAIY"]
[Sun Nov 23 00:45:56.536980 2025] [:error] [pid 39942:tid 40011] [client 216.73.163.147:29697] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sun Nov 23 00:45:58.883232 2025] [:error] [pid 39942:tid 39997] [client 216.73.163.147:29697] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sun Nov 23 00:45:59.594343 2025] [:error] [pid 39942:tid 40013] [client 216.73.163.147:29697] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sun Nov 23 00:46:00.004836 2025] [:error] [pid 39942:tid 40000] [client 216.73.163.147:29697] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sun Nov 23 00:46:00.704862 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.147:29697] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSHoyKNupsOsQf9D2gxH6QAAAU8"]
[Sun Nov 23 00:46:01.456706 2025] [:error] [pid 39719:tid 39797] [client 216.73.163.121:56005] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Sun Nov 23 00:46:01.841583 2025] [:error] [pid 39719:tid 39777] [client 216.73.163.121:56005] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sun Nov 23 00:46:02.185210 2025] [:error] [pid 39719:tid 39795] [client 216.73.163.121:56005] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSHoyhmP4k0tY5Yex-W26wAAARM"]
[Sun Nov 23 00:46:03.250093 2025] [:error] [pid 39942:tid 40013] [client 216.73.163.132:56645] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSHoy6NupsOsQf9D2gxH8gAAAVI"]
[Sun Nov 23 00:46:04.333724 2025] [:error] [pid 39718:tid 39756] [client 216.73.163.146:45327] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Nov 23 00:46:05.413185 2025] [:error] [pid 39718:tid 39755] [client 216.73.163.146:45327] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sun Nov 23 00:46:05.792354 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.146:45327] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sun Nov 23 00:46:06.128409 2025] [:error] [pid 39718:tid 39759] [client 216.73.163.146:45327] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSHozgQ3B_uDoeItNmNXvwAAAEo"]
[Sun Nov 23 00:46:06.838085 2025] [:error] [pid 39942:tid 39994] [client 216.73.163.147:26481] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSHozqNupsOsQf9D2gxIAQAAAUA"]
[Sun Nov 23 00:46:10.529606 2025] [:error] [pid 39942:tid 40019] [client 216.73.163.155:36353] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Sun Nov 23 00:46:11.275693 2025] [:error] [pid 39942:tid 40016] [client 216.73.163.155:36353] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSHo06NupsOsQf9D2gxIDgAAAVU"]
[Sun Nov 23 00:46:12.351027 2025] [:error] [pid 39718:tid 39766] [client 216.73.163.123:62109] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "jandakotpilotshop.com"] [uri "/tiny.php"] [unique_id "aSHo1AQ3B_uDoeItNmNXxwAAAFE"]
[Sun Nov 23 00:46:13.529462 2025] [:error] [pid 39942:tid 40002] [client 216.73.163.132:61763] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Nov 23 00:46:13.891526 2025] [:error] [pid 39942:tid 39998] [client 216.73.163.132:61763] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sun Nov 23 00:46:14.256379 2025] [:error] [pid 39942:tid 40011] [client 216.73.163.132:61763] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSHo1qNupsOsQf9D2gxIFwAAAVA"]
[Sun Nov 23 00:46:15.325854 2025] [:error] [pid 39719:tid 39786] [client 216.73.163.118:31421] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sun Nov 23 00:46:15.718851 2025] [:error] [pid 39719:tid 39793] [client 216.73.163.118:31421] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Sun Nov 23 00:46:16.522053 2025] [:error] [pid 39719:tid 39788] [client 216.73.163.118:31421] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Nov 23 00:46:18.054197 2025] [:error] [pid 39719:tid 39800] [client 216.73.163.118:31421] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSHo2hmP4k0tY5Yex-W3EAAAARg"]
[Sun Nov 23 00:46:18.770178 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.150:64349] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sun Nov 23 00:46:19.825282 2025] [:error] [pid 8816:tid 8898] [client 216.73.163.150:64349] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSHo25b4RIAN-_BXnHlDwQAAAI0"]
[Sun Nov 23 00:46:21.120246 2025] [:error] [pid 8816:tid 8891] [client 216.73.163.123:45637] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Sun Nov 23 00:46:22.263480 2025] [:error] [pid 8816:tid 8889] [client 216.73.163.123:45637] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sun Nov 23 00:46:22.607411 2025] [:error] [pid 8816:tid 8888] [client 216.73.163.123:45637] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Nov 23 00:46:23.939654 2025] [:error] [pid 8816:tid 8897] [client 216.73.163.123:45637] [client 216.73.163.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.123, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSHo35b4RIAN-_BXnHlD1AAAAIw"]
[Sun Nov 23 00:46:25.808640 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.123:45637] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSHo4Zb4RIAN-_BXnHlD3QAAAJU"]
[Sun Nov 23 00:46:26.663000 2025] [:error] [pid 8816:tid 8885] [client 216.73.163.154:47211] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Sun Nov 23 00:46:27.008911 2025] [:error] [pid 8816:tid 8904] [client 216.73.163.154:47211] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSHo45b4RIAN-_BXnHlD4gAAAJM"]
[Sun Nov 23 00:46:27.752042 2025] [:error] [pid 39719:tid 39796] [client 216.73.163.142:22111] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Nov 23 00:46:28.490666 2025] [:error] [pid 39719:tid 39800] [client 216.73.163.142:22111] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sun Nov 23 00:46:29.221350 2025] [:error] [pid 39719:tid 39776] [client 216.73.163.142:22111] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSHo5RmP4k0tY5Yex-W3JAAAAQA"]
[Sun Nov 23 00:46:30.287103 2025] [:error] [pid 39713:tid 39734] [client 216.73.163.160:63613] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sun Nov 23 00:46:30.642302 2025] [:error] [pid 39713:tid 39736] [client 216.73.163.160:63613] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sun Nov 23 00:46:31.346277 2025] [:error] [pid 39713:tid 39733] [client 216.73.163.160:63613] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSHo50Ugrb325CIAjPqHTgAAAAw"]
[Sun Nov 23 00:46:32.506777 2025] [:error] [pid 39718:tid 39772] [client 216.73.163.148:52659] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSHo6AQ3B_uDoeItNmNX3wAAAFc"]
[Sun Nov 23 00:46:33.268333 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.136:37715] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Sun Nov 23 00:46:33.629016 2025] [:error] [pid 8816:tid 8887] [client 216.73.163.136:37715] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sun Nov 23 00:46:34.337949 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.136:37715] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSHo6pb4RIAN-_BXnHlD7gAAAIY"]
[Sun Nov 23 00:46:35.120211 2025] [:error] [pid 39713:tid 39743] [client 216.73.163.154:41251] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sun Nov 23 00:46:35.821401 2025] [:error] [pid 39713:tid 39732] [client 216.73.163.154:41251] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Sun Nov 23 00:46:36.159635 2025] [:error] [pid 39713:tid 39735] [client 216.73.163.154:41251] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSHo7EUgrb325CIAjPqHVAAAAA4"]
[Sun Nov 23 00:46:37.372076 2025] [:error] [pid 39713:tid 39723] [client 216.73.163.141:56569] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/db.php"] [unique_id "aSHo7UUgrb325CIAjPqHWQAAAAI"]
[Sun Nov 23 00:46:38.114974 2025] [:error] [pid 39719:tid 39780] [client 216.73.163.149:58933] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSHo7hmP4k0tY5Yex-W3MwAAAQQ"]
[Sun Nov 23 00:46:38.890016 2025] [:error] [pid 39942:tid 40000] [client 216.73.163.147:42583] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSHo7qNupsOsQf9D2gxIOQAAAUU"]
[Sun Nov 23 00:46:39.696875 2025] [:error] [pid 8816:tid 8905] [client 216.73.163.144:36823] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSHo75b4RIAN-_BXnHlD9AAAAJQ"]
[Sun Nov 23 00:46:40.408886 2025] [:error] [pid 39942:tid 40005] [client 216.73.163.146:25147] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSHo8KNupsOsQf9D2gxIOwAAAUo"]
[Sun Nov 23 00:46:41.123602 2025] [:error] [pid 39942:tid 40017] [client 45.146.54.139:20495] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSHo8aNupsOsQf9D2gxIPQAAAVY"]
[Sun Nov 23 00:46:42.634976 2025] [:error] [pid 39942:tid 39999] [client 45.146.54.131:63637] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSHo8qNupsOsQf9D2gxIQQAAAUQ"]
[Sun Nov 23 00:46:43.317615 2025] [:error] [pid 39713:tid 39741] [client 45.146.54.130:41747] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSHo80Ugrb325CIAjPqHXgAAABQ"]
[Sun Nov 23 00:46:44.028160 2025] [:error] [pid 39719:tid 39786] [client 216.73.163.145:45307] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSHo9BmP4k0tY5Yex-W3OwAAAQo"]
[Sun Nov 23 00:46:45.165655 2025] [:error] [pid 8816:tid 8896] [client 216.73.163.122:58691] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSHo9Zb4RIAN-_BXnHlD_QAAAIs"]
[Sun Nov 23 00:46:46.627326 2025] [:error] [pid 39719:tid 39798] [client 216.73.163.155:54627] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aSHo9hmP4k0tY5Yex-W3QAAAARY"]
[Sun Nov 23 00:46:47.369703 2025] [:error] [pid 39719:tid 39793] [client 216.73.163.129:37999] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sun Nov 23 00:46:48.997634 2025] [:error] [pid 39719:tid 39778] [client 216.73.163.129:37999] [client 216.73.163.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.129, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSHo-BmP4k0tY5Yex-W3SQAAAQI"]
[Sun Nov 23 00:46:51.138117 2025] [:error] [pid 39719:tid 39798] [client 216.73.163.129:37999] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSHo-xmP4k0tY5Yex-W3UQAAARY"]
[Sun Nov 23 00:46:51.867716 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.121:57649] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSHo-5b4RIAN-_BXnHlEDAAAAJI"]
[Sun Nov 23 00:46:53.877884 2025] [:error] [pid 8816:tid 8907] [client 216.73.163.157:46379] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Nov 23 00:46:54.221153 2025] [:error] [pid 8816:tid 8887] [client 216.73.163.157:46379] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Sun Nov 23 00:46:55.813182 2025] [:error] [pid 8816:tid 8908] [client 216.73.163.157:46379] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sun Nov 23 00:46:56.195946 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.157:46379] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Sun Nov 23 00:46:58.066377 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.157:46379] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sun Nov 23 00:46:58.425937 2025] [:error] [pid 8816:tid 8907] [client 216.73.163.157:46379] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sun Nov 23 00:46:58.796662 2025] [:error] [pid 8816:tid 8888] [client 216.73.163.157:46379] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Sun Nov 23 00:46:59.143612 2025] [:error] [pid 8816:tid 8910] [client 216.73.163.157:46379] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Sun Nov 23 00:46:59.500611 2025] [:error] [pid 8816:tid 8891] [client 216.73.163.157:46379] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSHpA5b4RIAN-_BXnHlEIwAAAIc"]
[Sun Nov 23 00:47:00.186209 2025] [:error] [pid 8816:tid 8902] [client 216.73.163.143:41833] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSHpBJb4RIAN-_BXnHlEJAAAAJE"]
[Sun Nov 23 00:47:00.865766 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.144:54061] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSHpBJb4RIAN-_BXnHlEKAAAAJI"]
[Sun Nov 23 00:47:01.899908 2025] [:error] [pid 39719:tid 39799] [client 216.73.163.152:27025] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Sun Nov 23 00:47:02.252214 2025] [:error] [pid 39719:tid 39779] [client 216.73.163.152:27025] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sun Nov 23 00:47:02.938298 2025] [:error] [pid 39719:tid 39792] [client 216.73.163.152:27025] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sun Nov 23 00:47:03.626694 2025] [:error] [pid 39719:tid 39782] [client 216.73.163.152:27025] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSHpBxmP4k0tY5Yex-W3ZgAAAQY"]
[Sun Nov 23 00:47:04.317515 2025] [:error] [pid 39718:tid 39771] [client 45.146.54.139:60811] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSHpCAQ3B_uDoeItNmNYCAAAAFY"]
[Sun Nov 23 00:47:04.997922 2025] [:error] [pid 39942:tid 40006] [client 45.146.54.138:30717] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSHpCKNupsOsQf9D2gxIXQAAAUs"]
[Sun Nov 23 00:47:07.052126 2025] [:error] [pid 39942:tid 40011] [client 216.73.163.120:28287] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSHpC6NupsOsQf9D2gxIZQAAAVA"]
[Sun Nov 23 00:47:08.096720 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.154:52815] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSHpDAQ3B_uDoeItNmNYEQAAAEI"]
[Sun Nov 23 00:47:09.495130 2025] [:error] [pid 39713:tid 39734] [client 216.73.163.149:46397] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSHpDUUgrb325CIAjPqHdAAAAA0"]
[Sun Nov 23 00:47:14.251143 2025] [:error] [pid 39942:tid 40001] [client 216.73.163.160:40017] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aSHpEqNupsOsQf9D2gxIdwAAAUY"]
[Sun Nov 23 00:47:14.979437 2025] [:error] [pid 8816:tid 8905] [client 216.73.163.156:33025] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Sun Nov 23 00:47:15.723726 2025] [:error] [pid 8816:tid 8907] [client 216.73.163.156:33025] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/about.php"] [unique_id "aSHpE5b4RIAN-_BXnHlENwAAAJY"]
[Sun Nov 23 00:47:17.252741 2025] [:error] [pid 39719:tid 39781] [client 216.73.163.117:25307] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sun Nov 23 00:47:18.342370 2025] [:error] [pid 39719:tid 39784] [client 216.73.163.117:25307] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sun Nov 23 00:47:18.698692 2025] [:error] [pid 39719:tid 39776] [client 216.73.163.117:25307] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSHpFhmP4k0tY5Yex-W3eAAAAQA"]
[Sun Nov 23 00:47:20.081870 2025] [:error] [pid 39719:tid 39793] [client 216.73.163.129:44123] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSHpGBmP4k0tY5Yex-W3ewAAARE"]
[Sun Nov 23 00:47:22.369537 2025] [:error] [pid 39718:tid 39758] [client 45.146.54.139:23445] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSHpGgQ3B_uDoeItNmNYSwAAAEk"]
[Sun Nov 23 00:47:24.987864 2025] [:error] [pid 39713:tid 39739] [client 216.73.163.116:20739] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSHpHEUgrb325CIAjPqHiwAAABI"]
[Sun Nov 23 00:47:28.442758 2025] [:error] [pid 39942:tid 40004] [client 216.73.163.129:53875] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Nov 23 00:47:28.821210 2025] [:error] [pid 39942:tid 40008] [client 216.73.163.129:53875] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSHpIKNupsOsQf9D2gxIjAAAAU0"]
[Sun Nov 23 00:47:30.483022 2025] [:error] [pid 39719:tid 39784] [client 216.73.163.147:47773] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSHpIhmP4k0tY5Yex-W3gQAAAQg"]
[Sun Nov 23 00:47:34.193873 2025] [:error] [pid 8816:tid 8895] [client 216.73.163.141:49951] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSHpJpb4RIAN-_BXnHlEVgAAAIo"]
[Sun Nov 23 00:47:34.964365 2025] [:error] [pid 39713:tid 39733] [client 216.73.163.153:23801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sun Nov 23 00:47:36.441531 2025] [:error] [pid 39713:tid 39721] [client 216.73.163.153:23801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sun Nov 23 00:47:36.785030 2025] [:error] [pid 39713:tid 39725] [client 216.73.163.153:23801] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSHpKEUgrb325CIAjPqHnQAAAAQ"]
[Sun Nov 23 00:47:38.310037 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.141:32711] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sun Nov 23 00:47:39.022743 2025] [:error] [pid 8816:tid 8889] [client 216.73.163.141:32711] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSHpK5b4RIAN-_BXnHlEXQAAAIU"]
[Sun Nov 23 00:47:39.783805 2025] [:error] [pid 39942:tid 40000] [client 216.73.163.134:43901] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSHpK6NupsOsQf9D2gxInAAAAUU"]
[Sun Nov 23 00:47:41.815212 2025] [:error] [pid 39719:tid 39787] [client 216.73.163.153:63955] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSHpLRmP4k0tY5Yex-W3kgAAAQs"]
[Sun Nov 23 00:47:43.677662 2025] [:error] [pid 39718:tid 39769] [client 216.73.163.129:42483] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/install.php"] [unique_id "aSHpLwQ3B_uDoeItNmNYiwAAAFQ"]
[Sun Nov 23 00:47:44.460783 2025] [:error] [pid 39719:tid 39778] [client 45.131.194.122:36753] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSHpMBmP4k0tY5Yex-W3lgAAAQI"]
[Sun Nov 23 00:47:45.550391 2025] [:error] [pid 39719:tid 39785] [client 45.131.194.123:63461] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Sun Nov 23 00:47:47.428606 2025] [:error] [pid 39719:tid 39793] [client 45.131.194.123:63461] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/category-double.php"] [unique_id "aSHpMxmP4k0tY5Yex-W3nwAAARE"]
[Sun Nov 23 00:47:48.893513 2025] [:error] [pid 8816:tid 8891] [client 216.73.163.132:62391] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aSHpNJb4RIAN-_BXnHlEYwAAAIc"]
[Sun Nov 23 00:47:49.575270 2025] [:error] [pid 39718:tid 39767] [client 216.73.163.154:56907] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSHpNQQ3B_uDoeItNmNYnQAAAFI"]
[Sun Nov 23 00:47:50.701093 2025] [:error] [pid 39718:tid 39765] [client 216.73.163.160:58025] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Nov 23 00:47:51.085503 2025] [:error] [pid 39718:tid 39764] [client 216.73.163.160:58025] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSHpNwQ3B_uDoeItNmNYpAAAAE8"]
[Sun Nov 23 00:47:52.116909 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.117:41523] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSHpOJb4RIAN-_BXnHlEbAAAAI4"]
[Sun Nov 23 00:47:55.727027 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.141:55895] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSHpO6NupsOsQf9D2gxI0AAAAU8"]
[Sun Nov 23 00:47:56.794564 2025] [:error] [pid 39713:tid 39743] [client 216.73.163.131:55867] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sun Nov 23 00:47:57.135842 2025] [:error] [pid 39713:tid 39726] [client 216.73.163.131:55867] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSHpPUUgrb325CIAjPqHuwAAAAU"]
[Sun Nov 23 00:47:58.607680 2025] [:error] [pid 39942:tid 40017] [client 216.73.163.130:33325] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSHpPqNupsOsQf9D2gxI1gAAAVY"]
[Sun Nov 23 00:48:00.955353 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.146:54049] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/as.php"] [unique_id "aSHpQAQ3B_uDoeItNmNYvQAAAEI"]
[Sun Nov 23 00:48:02.112275 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.155:39181] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSHpQpb4RIAN-_BXnHlEfQAAAIA"]
[Sun Nov 23 00:48:02.820769 2025] [:error] [pid 39719:tid 39786] [client 216.73.163.131:54655] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/install.php"] [unique_id "aSHpQhmP4k0tY5Yex-W3vQAAAQo"]
[Sun Nov 23 00:48:03.550686 2025] [:error] [pid 39719:tid 39793] [client 45.146.54.135:34619] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aSHpQxmP4k0tY5Yex-W3vwAAARE"]
[Sun Nov 23 00:48:06.412650 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.131:28495] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSHpRgQ3B_uDoeItNmNY0AAAAEI"]
[Sun Nov 23 00:48:08.265832 2025] [:error] [pid 39719:tid 39790] [client 216.73.163.140:63549] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/rk2.php"] [unique_id "aSHpSBmP4k0tY5Yex-W3xgAAAQ4"]
[Sun Nov 23 00:48:10.685997 2025] [:error] [pid 39719:tid 39787] [client 45.146.54.138:26177] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sun Nov 23 00:48:11.060924 2025] [:error] [pid 39719:tid 39776] [client 45.146.54.138:26177] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSHpSxmP4k0tY5Yex-W3zQAAAQA"]
[Sun Nov 23 00:48:13.583310 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.146:54459] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSHpTZb4RIAN-_BXnHlEjAAAAI4"]
[Sun Nov 23 00:48:14.327836 2025] [:error] [pid 39719:tid 39782] [client 216.73.163.157:23605] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Sun Nov 23 00:48:16.949698 2025] [:error] [pid 39719:tid 39796] [client 216.73.163.157:23605] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSHpUBmP4k0tY5Yex-W32AAAARQ"]
[Sun Nov 23 00:48:17.967863 2025] [:error] [pid 39713:tid 39732] [client 216.73.163.122:34201] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSHpUUUgrb325CIAjPqHzwAAAAs"]
[Sun Nov 23 00:48:18.980699 2025] [:error] [pid 39713:tid 39738] [client 216.73.163.131:64437] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSHpUkUgrb325CIAjPqH0QAAABE"]
[Sun Nov 23 00:48:20.342781 2025] [:error] [pid 8816:tid 8889] [client 216.73.163.141:49183] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSHpVJb4RIAN-_BXnHlElgAAAIU"]
[Sun Nov 23 00:48:24.576473 2025] [:error] [pid 39942:tid 40011] [client 216.73.163.157:59803] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSHpWKNupsOsQf9D2gxI9gAAAVA"]
[Sun Nov 23 00:48:25.256880 2025] [:error] [pid 39942:tid 40015] [client 216.73.163.130:21659] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSHpWaNupsOsQf9D2gxI-AAAAVQ"]
[Sun Nov 23 00:48:27.102695 2025] [:error] [pid 39718:tid 39753] [client 45.146.54.139:32043] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSHpWwQ3B_uDoeItNmNZBAAAAEQ"]
[Sun Nov 23 00:48:27.819943 2025] [:error] [pid 39718:tid 39766] [client 216.73.163.153:52777] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSHpWwQ3B_uDoeItNmNZBwAAAFE"]
[Sun Nov 23 00:48:29.457082 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.160:22267] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSHpXZb4RIAN-_BXnHlEpAAAAI4"]
[Sun Nov 23 00:48:30.143131 2025] [:error] [pid 39942:tid 39999] [client 216.73.163.154:46883] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aSHpXqNupsOsQf9D2gxI_QAAAUQ"]
[Sun Nov 23 00:48:30.979641 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.147:31929] [client 216.73.163.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.147, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSHpXpb4RIAN-_BXnHlEpwAAAJI"]
[Sun Nov 23 00:48:30.983472 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.147:31929] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sun Nov 23 00:48:31.326244 2025] [:error] [pid 8816:tid 8902] [client 216.73.163.147:31929] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSHpX5b4RIAN-_BXnHlEqAAAAJE"]
[Sun Nov 23 00:48:32.704739 2025] [:error] [pid 8816:tid 8898] [client 216.73.163.157:45211] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Nov 23 00:48:33.062804 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.157:45211] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSHpYZb4RIAN-_BXnHlEsAAAAJU"]
[Sun Nov 23 00:48:33.779150 2025] [:error] [pid 8816:tid 8889] [client 45.146.54.132:44045] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/network.php"] [unique_id "aSHpYZb4RIAN-_BXnHlEsgAAAIU"]
[Sun Nov 23 00:48:34.496737 2025] [:error] [pid 39718:tid 39756] [client 45.146.54.131:44575] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Sun Nov 23 00:48:38.093977 2025] [:error] [pid 39718:tid 39759] [client 45.146.54.131:44575] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSHpZgQ3B_uDoeItNmNZJgAAAEo"]
[Sun Nov 23 00:48:38.827934 2025] [:error] [pid 39718:tid 39763] [client 45.146.54.132:54357] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSHpZgQ3B_uDoeItNmNZKAAAAE4"]
[Sun Nov 23 00:48:40.279405 2025] [:error] [pid 39713:tid 39725] [client 45.146.54.131:29343] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSHpaEUgrb325CIAjPqH5gAAAAQ"]
[Sun Nov 23 00:48:40.994684 2025] [:error] [pid 39713:tid 39735] [client 216.73.163.147:21575] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aSHpaEUgrb325CIAjPqH6gAAAA4"]
[Sun Nov 23 00:48:41.816657 2025] [:error] [pid 39713:tid 39732] [client 45.146.54.132:41857] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sun Nov 23 00:48:42.156615 2025] [:error] [pid 39713:tid 39728] [client 45.146.54.132:41857] [client 45.146.54.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.132, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSHpakUgrb325CIAjPqH8AAAAAc"]
[Sun Nov 23 00:48:42.941420 2025] [:error] [pid 39713:tid 39724] [client 45.146.54.132:41857] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSHpakUgrb325CIAjPqH8wAAAAM"]
[Sun Nov 23 00:48:46.261388 2025] [:error] [pid 39942:tid 39995] [client 216.73.163.118:26833] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSHpbqNupsOsQf9D2gxJDgAAAUE"]
[Sun Nov 23 00:48:47.017365 2025] [:error] [pid 39942:tid 39997] [client 216.73.163.151:29135] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Nov 23 00:48:47.381066 2025] [:error] [pid 39942:tid 40016] [client 216.73.163.151:29135] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSHpb6NupsOsQf9D2gxJEgAAAVU"]
[Sun Nov 23 00:48:48.069935 2025] [:error] [pid 39719:tid 39788] [client 216.73.163.133:50865] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSHpcBmP4k0tY5Yex-W36AAAAQw"]
[Sun Nov 23 00:48:49.795702 2025] [:error] [pid 8816:tid 8892] [client 216.73.163.157:60267] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sun Nov 23 00:48:50.857362 2025] [:error] [pid 8816:tid 8888] [client 216.73.163.157:60267] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSHpcpb4RIAN-_BXnHlE3wAAAIQ"]
[Sun Nov 23 00:48:52.281189 2025] [:error] [pid 39718:tid 39770] [client 216.73.163.153:56957] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSHpdAQ3B_uDoeItNmNZQwAAAFU"]
[Sun Nov 23 00:48:53.018225 2025] [:error] [pid 8816:tid 8890] [client 45.131.194.123:47807] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sun Nov 23 00:48:53.815821 2025] [:error] [pid 8816:tid 8903] [client 45.131.194.123:47807] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Nov 23 00:48:54.535959 2025] [:error] [pid 8816:tid 8897] [client 45.131.194.123:47807] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSHpdpb4RIAN-_BXnHlE7QAAAIw"]
[Sun Nov 23 00:48:56.283735 2025] [:error] [pid 39713:tid 39737] [client 216.73.163.157:22789] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/bypass.php"] [unique_id "aSHpeEUgrb325CIAjPqIDQAAABA"]
[Sun Nov 23 00:48:57.351673 2025] [:error] [pid 39718:tid 39760] [client 216.73.163.132:24231] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/count.php"] [unique_id "aSHpeQQ3B_uDoeItNmNZSwAAAEs"]
[Sun Nov 23 00:48:58.046923 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.133:55521] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Sun Nov 23 00:49:00.286823 2025] [:error] [pid 39718:tid 39752] [client 216.73.163.133:55521] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSHpfAQ3B_uDoeItNmNZUwAAAEM"]
[Sun Nov 23 00:49:01.746422 2025] [:error] [pid 39942:tid 40011] [client 216.73.163.136:42099] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||jandakotpilotshop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "jandakotpilotshop.com"] [uri "/images/stories/themes.php"] [unique_id "aSHpfaNupsOsQf9D2gxJIQAAAVA"]
[Sun Nov 23 00:49:02.711806 2025] [:error] [pid 39942:tid 40013] [client 216.73.163.136:42099] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSHpfqNupsOsQf9D2gxJIgAAAVI"]
[Sun Nov 23 00:49:04.153546 2025] [:error] [pid 8816:tid 8902] [client 216.73.163.135:42753] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSHpgJb4RIAN-_BXnHlFAQAAAJE"]
[Sun Nov 23 00:49:04.899783 2025] [:error] [pid 8816:tid 8885] [client 216.73.163.155:45367] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSHpgJb4RIAN-_BXnHlFAwAAAIE"]
[Sun Nov 23 00:49:06.413048 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.149:25447] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Sun Nov 23 00:49:08.050165 2025] [:error] [pid 39718:tid 39757] [client 216.73.163.149:25447] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSHphAQ3B_uDoeItNmNZaQAAAEg"]
[Sun Nov 23 00:49:09.526686 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.147:64783] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSHphZb4RIAN-_BXnHlFDgAAAI8"]
[Sun Nov 23 00:49:10.728469 2025] [:error] [pid 39718:tid 39756] [client 216.73.163.133:58399] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSHphgQ3B_uDoeItNmNZbgAAAEc"]
[Sun Nov 23 00:49:11.413988 2025] [:error] [pid 8816:tid 8889] [client 45.131.194.122:34505] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Sun Nov 23 00:49:13.304716 2025] [:error] [pid 8816:tid 8887] [client 45.131.194.122:34505] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSHpiZb4RIAN-_BXnHlFGQAAAIM"]
[Sun Nov 23 00:49:14.419022 2025] [:error] [pid 8816:tid 8905] [client 45.146.54.135:27063] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/colour.php"] [unique_id "aSHpipb4RIAN-_BXnHlFGwAAAJQ"]
[Sun Nov 23 00:49:15.145148 2025] [:error] [pid 39719:tid 39777] [client 216.73.163.159:62091] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Nov 23 00:49:15.535348 2025] [:error] [pid 39719:tid 39796] [client 216.73.163.159:62091] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSHpixmP4k0tY5Yex-W39gAAARQ"]
[Sun Nov 23 00:49:16.217606 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.159:48443] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/images/include.php"] [unique_id "aSHpjKNupsOsQf9D2gxJNwAAAU8"]
[Sun Nov 23 00:49:17.693406 2025] [:error] [pid 39719:tid 39798] [client 216.73.163.144:54839] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSHpjRmP4k0tY5Yex-W3-QAAARY"]
[Sun Nov 23 00:49:20.195417 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.139:56421] File does not exist: /usr/local/apache/htdocs/suspended-page/entrepreneuse.php
[Sun Nov 23 00:49:20.560899 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.139:56421] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSHpkJb4RIAN-_BXnHlFLAAAAJU"]
[Sun Nov 23 00:49:21.305045 2025] [:error] [pid 39713:tid 39742] [client 216.73.163.148:48033] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSHpkUUgrb325CIAjPqIKAAAABU"]
[Sun Nov 23 00:49:23.800306 2025] [:error] [pid 39719:tid 39799] [client 216.73.163.133:33721] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSHpkxmP4k0tY5Yex-W4AgAAARc"]
[Sun Nov 23 00:49:25.343370 2025] [:error] [pid 39942:tid 39999] [client 216.73.163.122:34095] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSHplaNupsOsQf9D2gxJRQAAAUQ"]
[Sun Nov 23 00:49:26.111427 2025] [:error] [pid 39718:tid 39755] [client 216.73.163.134:31025] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Sun Nov 23 00:49:27.220220 2025] [:error] [pid 39718:tid 39773] [client 216.73.163.134:31025] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSHplwQ3B_uDoeItNmNZewAAAFg"]
[Sun Nov 23 00:49:27.929872 2025] [:error] [pid 39713:tid 39735] [client 216.73.163.137:38825] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSHpl0Ugrb325CIAjPqINwAAAA4"]
[Sun Nov 23 00:49:29.001409 2025] [:error] [pid 8816:tid 8907] [client 216.73.163.146:29481] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSHpmZb4RIAN-_BXnHlFOAAAAJY"]
[Sun Nov 23 00:49:29.745489 2025] [:error] [pid 39942:tid 40019] [client 45.146.54.132:63335] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Sun Nov 23 00:49:31.528713 2025] [:error] [pid 39942:tid 39997] [client 45.146.54.132:63335] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSHpm6NupsOsQf9D2gxJUAAAAUI"]
[Sun Nov 23 00:49:32.267372 2025] [:error] [pid 39942:tid 40017] [client 216.73.163.157:37931] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Sun Nov 23 00:49:32.994685 2025] [:error] [pid 39942:tid 40013] [client 216.73.163.157:37931] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSHpnKNupsOsQf9D2gxJVQAAAVI"]
[Sun Nov 23 00:49:33.676953 2025] [:error] [pid 39719:tid 39791] [client 45.131.194.122:22653] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSHpnRmP4k0tY5Yex-W4CQAAAQ8"]
[Sun Nov 23 00:49:34.776402 2025] [:error] [pid 39713:tid 39739] [client 216.73.163.129:55133] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSHpnkUgrb325CIAjPqIewAAABI"]
[Sun Nov 23 00:49:35.494423 2025] [:error] [pid 39713:tid 39721] [client 216.73.163.154:48985] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aSHpn0Ugrb325CIAjPqIfQAAAAA"]
[Sun Nov 23 00:49:37.007966 2025] [:error] [pid 39718:tid 39760] [client 216.73.163.138:29259] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSHpoQQ3B_uDoeItNmNZjAAAAEs"]
[Sun Nov 23 00:49:38.032975 2025] [:error] [pid 39942:tid 39995] [client 216.73.163.129:26431] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSHpoqNupsOsQf9D2gxJeAAAAUE"]
[Sun Nov 23 00:49:39.707435 2025] [:error] [pid 8816:tid 8892] [client 216.73.163.123:58283] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSHpo5b4RIAN-_BXnHlFQwAAAIg"]
[Sun Nov 23 00:49:40.442629 2025] [:error] [pid 39942:tid 40018] [client 216.73.163.119:42605] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSHppKNupsOsQf9D2gxJfQAAAVc"]
[Sun Nov 23 00:49:43.361362 2025] [:error] [pid 8816:tid 8910] [client 216.73.163.136:34867] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSHpp5b4RIAN-_BXnHlFSwAAAJg"]
[Sun Nov 23 00:49:45.396741 2025] [:error] [pid 39942:tid 40019] [client 216.73.163.156:58479] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSHpqaNupsOsQf9D2gxJiQAAAVg"]
[Sun Nov 23 00:49:46.434092 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.119:31671] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSHpqpb4RIAN-_BXnHlFVAAAAIk"]
[Sun Nov 23 00:49:47.690569 2025] [:error] [pid 39719:tid 39789] [client 216.73.163.141:29957] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSHpqxmP4k0tY5Yex-W4FwAAAQ0"]
[Sun Nov 23 00:49:49.262852 2025] [:error] [pid 39713:tid 39734] [client 216.73.163.150:24837] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Sun Nov 23 00:49:50.634282 2025] [:error] [pid 39713:tid 39725] [client 216.73.163.150:24837] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/plugin.php"] [unique_id "aSHprkUgrb325CIAjPqIowAAAAQ"]
[Sun Nov 23 00:49:51.378369 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.149:34587] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSHpr5b4RIAN-_BXnHlFXAAAAIY"]
[Sun Nov 23 00:49:54.564981 2025] [:error] [pid 39718:tid 39764] [client 216.73.163.144:43341] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Sun Nov 23 00:49:54.912779 2025] [:error] [pid 39718:tid 39772] [client 216.73.163.144:43341] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSHpsgQ3B_uDoeItNmNZowAAAFc"]
[Sun Nov 23 00:49:56.996524 2025] [:error] [pid 39719:tid 39782] [client 216.73.163.132:41263] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSHptBmP4k0tY5Yex-W4KAAAAQY"]
[Sun Nov 23 00:49:58.080938 2025] [:error] [pid 39942:tid 39999] [client 45.131.194.122:51625] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Sun Nov 23 00:49:58.457672 2025] [:error] [pid 39942:tid 40015] [client 45.131.194.122:51625] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSHptqNupsOsQf9D2gxJrAAAAVQ"]
[Sun Nov 23 00:50:00.056505 2025] [:error] [pid 39713:tid 39734] [client 216.73.163.157:57369] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSHpuEUgrb325CIAjPqIqwAAAA0"]
[Sun Nov 23 00:50:00.833406 2025] [:error] [pid 39942:tid 40013] [client 216.73.163.150:22499] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sun Nov 23 00:50:01.211899 2025] [:error] [pid 39942:tid 40017] [client 216.73.163.150:22499] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSHpuaNupsOsQf9D2gxJsAAAAVY"]
[Sun Nov 23 00:50:02.439069 2025] [:error] [pid 8816:tid 8908] [client 216.73.163.121:33795] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSHpupb4RIAN-_BXnHlFfQAAAJc"]
[Sun Nov 23 00:50:04.192461 2025] [:error] [pid 8816:tid 8887] [client 216.73.163.156:22899] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sun Nov 23 00:50:05.009602 2025] [:error] [pid 8816:tid 8888] [client 216.73.163.156:22899] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSHpvZb4RIAN-_BXnHlFigAAAIQ"]
[Sun Nov 23 00:50:06.832063 2025] [:error] [pid 39942:tid 40007] [client 216.73.163.146:29177] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSHpvqNupsOsQf9D2gxJvgAAAUw"]
[Sun Nov 23 00:50:07.536324 2025] [:error] [pid 39713:tid 39731] [client 216.73.163.132:40941] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Sun Nov 23 00:50:07.887306 2025] [:error] [pid 39713:tid 39739] [client 216.73.163.132:40941] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSHpv0Ugrb325CIAjPqIsQAAABI"]
[Sun Nov 23 00:50:08.574381 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.134:39853] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSHpwJb4RIAN-_BXnHlFjwAAAJU"]
[Sun Nov 23 00:50:09.402244 2025] [:error] [pid 8816:tid 8907] [client 45.131.194.122:32011] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Sun Nov 23 00:50:10.157427 2025] [:error] [pid 8816:tid 8902] [client 45.131.194.122:32011] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSHpwpb4RIAN-_BXnHlFkwAAAJE"]
[Sun Nov 23 00:50:10.879947 2025] [:error] [pid 39942:tid 39997] [client 216.73.163.154:47167] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSHpwqNupsOsQf9D2gxJyAAAAUI"]
[Sun Nov 23 00:50:13.891226 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.141:30875] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSHpxZb4RIAN-_BXnHlFoAAAAIk"]
[Sun Nov 23 00:50:14.626223 2025] [:error] [pid 8816:tid 8885] [client 45.146.54.139:55369] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSHpxpb4RIAN-_BXnHlFowAAAIE"]
[Sun Nov 23 00:50:15.690658 2025] [:error] [pid 8816:tid 8910] [client 45.146.54.131:49501] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/log.php"] [unique_id "aSHpx5b4RIAN-_BXnHlFpQAAAJg"]
[Sun Nov 23 00:50:16.502573 2025] [:error] [pid 39942:tid 40006] [client 216.73.163.144:26441] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSHpyKNupsOsQf9D2gxJ0QAAAUs"]
[Sun Nov 23 00:50:17.221105 2025] [:error] [pid 39942:tid 40014] [client 216.73.163.149:41251] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSHpyaNupsOsQf9D2gxJ0gAAAVM"]
[Sun Nov 23 00:50:18.969848 2025] [:error] [pid 39719:tid 39797] [client 216.73.163.145:39219] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/aw.php"] [unique_id "aSHpyhmP4k0tY5Yex-W4QAAAARU"]
[Sun Nov 23 00:50:21.263933 2025] [:error] [pid 39718:tid 39765] [client 216.73.163.149:41431] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSHpzQQ3B_uDoeItNmNZwwAAAFA"]
[Sun Nov 23 00:50:21.971722 2025] [:error] [pid 39942:tid 39999] [client 216.73.163.121:20147] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/install.php"] [unique_id "aSHpzaNupsOsQf9D2gxJ3AAAAUQ"]
[Sun Nov 23 00:50:23.109234 2025] [:error] [pid 8816:tid 8900] [client 45.146.54.132:41071] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Sun Nov 23 00:50:23.464898 2025] [:error] [pid 8816:tid 8895] [client 45.146.54.132:41071] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSHpz5b4RIAN-_BXnHlFrAAAAIo"]
[Sun Nov 23 00:50:24.150078 2025] [:error] [pid 39713:tid 39740] [client 216.73.163.142:48543] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSHp0EUgrb325CIAjPqIywAAABM"]
[Sun Nov 23 00:50:25.687667 2025] [:error] [pid 39719:tid 39788] [client 216.73.163.116:58803] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/template-less.php"] [unique_id "aSHp0RmP4k0tY5Yex-W4RQAAAQw"]
[Sun Nov 23 00:50:26.544358 2025] [:error] [pid 39713:tid 39723] [client 216.73.163.122:34553] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSHp0kUgrb325CIAjPqI0AAAAAI"]
[Sun Nov 23 00:50:29.928306 2025] [:error] [pid 39942:tid 40008] [client 216.73.163.116:21909] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aSHp1aNupsOsQf9D2gxJ8wAAAU0"]
[Sun Nov 23 00:50:30.636325 2025] [:error] [pid 39713:tid 39744] [client 216.73.163.117:59989] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSHp1kUgrb325CIAjPqI1wAAABc"]
[Sun Nov 23 00:50:32.181489 2025] [:error] [pid 39719:tid 39785] [client 216.73.163.130:49903] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/file.php"] [unique_id "aSHp2BmP4k0tY5Yex-W4SwAAAQk"]
[Sun Nov 23 00:50:33.366204 2025] [:error] [pid 39942:tid 40003] [client 216.73.163.148:50031] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSHp2aNupsOsQf9D2gxJ_AAAAUg"]
[Sun Nov 23 00:50:34.486776 2025] [:error] [pid 8816:tid 8886] [client 216.73.163.146:44707] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/load.php"] [unique_id "aSHp2pb4RIAN-_BXnHlFvwAAAII"]
[Sun Nov 23 00:50:35.270474 2025] [:error] [pid 39718:tid 39762] [client 45.146.54.135:60475] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSHp2wQ3B_uDoeItNmNZ0wAAAE0"]
[Sun Nov 23 00:50:35.964338 2025] [:error] [pid 39718:tid 39756] [client 216.73.163.146:44455] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSHp2wQ3B_uDoeItNmNZ1AAAAEc"]
[Sun Nov 23 00:50:37.836036 2025] [:error] [pid 39713:tid 39744] [client 216.73.163.132:60963] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSHp3UUgrb325CIAjPqI5AAAABc"]
[Sun Nov 23 00:50:38.638107 2025] [:error] [pid 39718:tid 39749] [client 216.73.163.138:61339] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Sun Nov 23 00:50:39.104763 2025] [:error] [pid 39718:tid 39757] [client 216.73.163.138:61339] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSHp3wQ3B_uDoeItNmNZ3AAAAEg"]
[Sun Nov 23 00:50:40.588233 2025] [:error] [pid 39942:tid 40004] [client 216.73.163.149:43919] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Sun Nov 23 00:50:40.949825 2025] [:error] [pid 39942:tid 40016] [client 216.73.163.149:43919] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSHp4KNupsOsQf9D2gxKDAAAAVU"]
[Sun Nov 23 00:50:41.766625 2025] [:error] [pid 39718:tid 39756] [client 216.73.163.140:53095] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSHp4QQ3B_uDoeItNmNZ4QAAAEc"]
[Sun Nov 23 00:50:42.934637 2025] [:error] [pid 39713:tid 39732] [client 216.73.163.139:20173] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSHp4kUgrb325CIAjPqI5gAAAAs"]
[Sun Nov 23 00:50:45.432045 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.141:30359] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Sun Nov 23 00:50:46.866149 2025] [:error] [pid 8816:tid 8895] [client 216.73.163.141:30359] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aSHp5pb4RIAN-_BXnHlF1gAAAIo"]
[Sun Nov 23 00:50:47.896300 2025] [:error] [pid 39718:tid 39761] [client 216.73.163.117:40973] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSHp5wQ3B_uDoeItNmNZ6gAAAEw"]
[Sun Nov 23 00:50:49.429635 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.118:61077] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSHp6Zb4RIAN-_BXnHlF3QAAAJU"]
[Sun Nov 23 00:50:50.132207 2025] [:error] [pid 39942:tid 40004] [client 45.146.54.130:20197] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSHp6qNupsOsQf9D2gxKFwAAAUk"]
[Sun Nov 23 00:50:50.875966 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.143:61713] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSHp6pb4RIAN-_BXnHlF4AAAAIk"]
[Sun Nov 23 01:19:28.852644 2025] [:error] [pid 39718:tid 39749] [client 43.231.0.82:35828] [client 43.231.0.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.231.0.82, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSHwoAQ3B_uDoeItNmNlLwAAAEA"]
[Sun Nov 23 01:19:28.856637 2025] [:error] [pid 39718:tid 39749] [client 43.231.0.82:35828] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 01:19:31.357217 2025] [:error] [pid 39719:tid 39784] [client 43.231.0.82:36422] [client 43.231.0.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.231.0.82, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSHwoxmP4k0tY5Yex-XC1QAAAQg"]
[Sun Nov 23 01:19:31.363422 2025] [:error] [pid 39719:tid 39784] [client 43.231.0.82:36422] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 03:49:35.402526 2025] [:error] [pid 13603:tid 13662] [client 216.126.225.91:45834] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aSITz8GmFEU5DL0QIG2gBAAAAIA"]
[Sun Nov 23 04:01:18.797252 2025] [:error] [pid 56181:tid 56256] [client 103.163.161.30:50852] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/style.php"] [unique_id "aSIWjskLwhNGnt-ns6aUaQAAAI8"]
[Sun Nov 23 04:01:19.062505 2025] [:error] [pid 56178:tid 56219] [client 103.163.161.30:50933] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/style.php"] [unique_id "aSIWj5zQAXWPTUeTK1RhQgAAAEU"]
[Sun Nov 23 04:01:19.367345 2025] [:error] [pid 56181:tid 56243] [client 103.163.161.30:51033] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/themes/style.php"] [unique_id "aSIWj8kLwhNGnt-ns6aUggAAAII"]
[Sun Nov 23 04:01:19.657703 2025] [:error] [pid 56181:tid 56255] [client 103.163.161.30:51111] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/style.php"] [unique_id "aSIWj8kLwhNGnt-ns6aUkAAAAI4"]
[Sun Nov 23 04:01:19.924160 2025] [:error] [pid 56181:tid 56263] [client 103.163.161.30:51346] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/style.php"] [unique_id "aSIWj8kLwhNGnt-ns6aUnAAAAJY"]
[Sun Nov 23 04:01:20.210131 2025] [:error] [pid 56181:tid 56261] [client 103.163.161.30:51556] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/chosen.php"] [unique_id "aSIWkMkLwhNGnt-ns6aUqQAAAJQ"]
[Sun Nov 23 04:01:20.478676 2025] [:error] [pid 56176:tid 56208] [client 103.163.161.30:51643] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/file.php"] [unique_id "aSIWkLjUOh400lKsKrFW2gAAABU"]
[Sun Nov 23 04:01:20.731076 2025] [:error] [pid 56176:tid 56205] [client 103.163.161.30:51718] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/flower.php"] [unique_id "aSIWkLjUOh400lKsKrFW3gAAABI"]
[Sun Nov 23 04:01:20.999649 2025] [:error] [pid 56275:tid 56294] [client 103.163.161.30:51964] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/gifclass.php"] [unique_id "aSIWkLhaClcAPg7VXOSFzAAAAM8"]
[Sun Nov 23 04:01:21.355328 2025] [:error] [pid 56181:tid 56254] [client 103.163.161.30:52125] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/bless.php"] [unique_id "aSIWkckLwhNGnt-ns6aUxwAAAI0"]
[Sun Nov 23 04:01:21.596248 2025] [:error] [pid 56178:tid 56234] [client 103.163.161.30:52314] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/class-t.api.php"] [unique_id "aSIWkZzQAXWPTUeTK1RhawAAAFQ"]
[Sun Nov 23 04:01:21.851302 2025] [:error] [pid 56178:tid 56236] [client 103.163.161.30:52512] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/blurbs.php"] [unique_id "aSIWkZzQAXWPTUeTK1RhcAAAAFY"]
[Sun Nov 23 04:01:22.177507 2025] [:error] [pid 56181:tid 56255] [client 103.163.161.30:52624] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/akcc.php"] [unique_id "aSIWkskLwhNGnt-ns6aU1AAAAI4"]
[Sun Nov 23 04:01:22.488728 2025] [:error] [pid 56176:tid 56189] [client 103.163.161.30:52777] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/abcd.php"] [unique_id "aSIWkrjUOh400lKsKrFW5wAAAAI"]
[Sun Nov 23 04:01:22.783046 2025] [:error] [pid 56275:tid 56298] [client 103.163.161.30:52884] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/shelp.php"] [unique_id "aSIWkrhaClcAPg7VXOSF4AAAANM"]
[Sun Nov 23 04:01:23.048102 2025] [:error] [pid 56178:tid 56230] [client 103.163.161.30:52933] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/cord.php"] [unique_id "aSIWk5zQAXWPTUeTK1RhegAAAFA"]
[Sun Nov 23 04:01:23.317213 2025] [:error] [pid 56181:tid 56255] [client 103.163.161.30:53099] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/dex.php"] [unique_id "aSIWk8kLwhNGnt-ns6aU4AAAAI4"]
[Sun Nov 23 04:01:23.580083 2025] [:error] [pid 56275:tid 56300] [client 103.163.161.30:53133] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSIWk7haClcAPg7VXOSF7AAAANU"]
[Sun Nov 23 04:01:23.846765 2025] [:error] [pid 56275:tid 56296] [client 103.163.161.30:53201] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/file2.php"] [unique_id "aSIWk7haClcAPg7VXOSF9AAAANE"]
[Sun Nov 23 04:01:24.095961 2025] [:error] [pid 56275:tid 56287] [client 103.163.161.30:53276] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/zwso.php"] [unique_id "aSIWlLhaClcAPg7VXOSF-wAAAMg"]
[Sun Nov 23 04:01:24.344280 2025] [:error] [pid 56181:tid 56243] [client 103.163.161.30:53357] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/zwso.php"] [unique_id "aSIWlMkLwhNGnt-ns6aU4wAAAII"]
[Sun Nov 23 04:01:24.634121 2025] [:error] [pid 56275:tid 56287] [client 103.163.161.30:53419] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aSIWlLhaClcAPg7VXOSGBQAAAMg"]
[Sun Nov 23 04:01:24.893977 2025] [:error] [pid 56181:tid 56263] [client 103.163.161.30:53473] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/bolt.php"] [unique_id "aSIWlMkLwhNGnt-ns6aU6QAAAJY"]
[Sun Nov 23 04:01:25.171599 2025] [:error] [pid 56275:tid 56283] [client 103.163.161.30:53576] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/shlo.php"] [unique_id "aSIWlbhaClcAPg7VXOSGEQAAAMQ"]
[Sun Nov 23 04:01:25.418037 2025] [:error] [pid 56176:tid 56207] [client 103.163.161.30:53665] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/133.php"] [unique_id "aSIWlbjUOh400lKsKrFW7gAAABQ"]
[Sun Nov 23 04:01:25.667447 2025] [:error] [pid 56178:tid 56223] [client 103.163.161.30:53760] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/ahax.php"] [unique_id "aSIWlZzQAXWPTUeTK1RhgwAAAEk"]
[Sun Nov 23 04:01:25.913897 2025] [:error] [pid 56176:tid 56194] [client 103.163.161.30:53810] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/php8.php"] [unique_id "aSIWlbjUOh400lKsKrFW8AAAAAc"]
[Sun Nov 23 04:01:26.160243 2025] [:error] [pid 56181:tid 56243] [client 103.163.161.30:53863] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/lufix1.php"] [unique_id "aSIWlskLwhNGnt-ns6aU_gAAAII"]
[Sun Nov 23 04:01:26.414885 2025] [:error] [pid 56176:tid 56195] [client 103.163.161.30:53930] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/witmm.php"] [unique_id "aSIWlrjUOh400lKsKrFW9gAAAAg"]
[Sun Nov 23 04:01:26.704933 2025] [:error] [pid 56176:tid 56208] [client 103.163.161.30:54000] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/css/index.php"] [unique_id "aSIWlrjUOh400lKsKrFW_AAAABU"]
[Sun Nov 23 04:01:26.959492 2025] [:error] [pid 56176:tid 56193] [client 103.163.161.30:54085] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aSIWlrjUOh400lKsKrFXAwAAAAY"]
[Sun Nov 23 04:01:27.207108 2025] [:error] [pid 56275:tid 56298] [client 103.163.161.30:54155] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/index.php"] [unique_id "aSIWl7haClcAPg7VXOSGKwAAANM"]
[Sun Nov 23 04:01:27.462500 2025] [:error] [pid 56181:tid 56250] [client 103.163.161.30:54174] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/ioxi-o.php"] [unique_id "aSIWl8kLwhNGnt-ns6aVFQAAAIk"]
[Sun Nov 23 04:01:27.714633 2025] [:error] [pid 56181:tid 56255] [client 103.163.161.30:54211] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/222.php"] [unique_id "aSIWl8kLwhNGnt-ns6aVHAAAAI4"]
[Sun Nov 23 04:01:27.964758 2025] [:error] [pid 56176:tid 56191] [client 103.163.161.30:54236] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/files.php"] [unique_id "aSIWl7jUOh400lKsKrFXEAAAAAQ"]
[Sun Nov 23 04:01:28.233172 2025] [:error] [pid 56275:tid 56296] [client 103.163.161.30:54270] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "jandakotpilotshop.com"] [uri "/wp-editor.php"] [unique_id "aSIWmLhaClcAPg7VXOSGNQAAANE"]
[Sun Nov 23 04:40:29.034169 2025] [:error] [pid 38739:tid 38781] [client 106.227.49.113:37007] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aSIfvQdvEgJm2n2cDmrujgAAAEw"]
[Sun Nov 23 04:57:47.721869 2025] [:error] [pid 38739:tid 38773] [client 104.255.170.81:49282] [client 104.255.170.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.255.170.81, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSIjywdvEgJm2n2cDmr1LAAAAEQ"]
[Sun Nov 23 04:57:47.726031 2025] [:error] [pid 38739:tid 38773] [client 104.255.170.81:49282] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 04:57:49.713757 2025] [:error] [pid 38824:tid 38835] [client 104.255.170.81:49286] [client 104.255.170.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.255.170.81, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSIjzU8WZjXLvbHTHPe8GwAAAMg"]
[Sun Nov 23 04:57:49.720667 2025] [:error] [pid 38824:tid 38835] [client 104.255.170.81:49286] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 10:45:04.348181 2025] [:error] [pid 44652:tid 44710] [client 14.215.163.132:51518] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aSJ1MNiQFwsyXQDhwyArFQAAAQQ"]
[Sun Nov 23 14:27:16.492671 2025] [:error] [pid 38740:tid 38797] [client 43.157.179.227:34132] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aSKpRA13QPZSi6O8umU-igAAAIE"]
[Sun Nov 23 15:24:07.172793 2025] [:error] [pid 38738:tid 38750] [client 90.156.142.27:51776] [client 90.156.142.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.142.27, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSK2lwytc6TL9XavPmOsBwAAAAg"]
[Sun Nov 23 15:24:07.178866 2025] [:error] [pid 38738:tid 38750] [client 90.156.142.27:51776] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 15:24:08.294452 2025] [:error] [pid 38739:tid 38769] [client 90.156.142.27:51910] [client 90.156.142.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.142.27, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSK2mAdvEgJm2n2cDmro4QAAAEA"]
[Sun Nov 23 15:24:08.300490 2025] [:error] [pid 38739:tid 38769] [client 90.156.142.27:51910] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 16:34:32.214720 2025] [:error] [pid 38740:tid 38805] [client 45.117.170.104:52168] [client 45.117.170.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.117.170.104, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSLHGA13QPZSi6O8umVmKAAAAIk"]
[Sun Nov 23 16:34:32.218824 2025] [:error] [pid 38740:tid 38805] [client 45.117.170.104:52168] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 16:34:33.193676 2025] [:error] [pid 44652:tid 44728] [client 45.117.170.104:52170] [client 45.117.170.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.117.170.104, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSLHGdiQFwsyXQDhwyCD-AAAARY"]
[Sun Nov 23 16:34:33.201307 2025] [:error] [pid 44652:tid 44728] [client 45.117.170.104:52170] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 17:16:17.580881 2025] [:error] [pid 44652:tid 44720] [client 182.42.111.213:46031] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aSLQ4diQFwsyXQDhwyDf6QAAAQ4"]
[Sun Nov 23 17:36:01.895681 2025] [:error] [pid 38738:tid 38759] [client 15.235.159.113:40310] [client 15.235.159.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.159.113, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSLVgQytc6TL9XavPmMr4QAAABE"]
[Sun Nov 23 17:36:01.899385 2025] [:error] [pid 38738:tid 38759] [client 15.235.159.113:40310] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 17:36:02.389627 2025] [:error] [pid 17534:tid 17556] [client 15.235.159.113:40324] [client 15.235.159.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.159.113, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSLVgnPX9nXBrhgM8sxcOgAAAdQ"]
[Sun Nov 23 17:36:02.400026 2025] [:error] [pid 17534:tid 17556] [client 15.235.159.113:40324] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 18:43:08.289004 2025] [:error] [pid 16066:tid 16088] [client 172.161.94.9:22561] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Sun Nov 23 18:43:08.530281 2025] [:error] [pid 16066:tid 16084] [client 172.161.94.9:22561] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 23 18:43:08.786359 2025] [:error] [pid 16066:tid 16081] [client 172.161.94.9:22561] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Sun Nov 23 18:43:09.288379 2025] [:error] [pid 16066:tid 16073] [client 172.161.94.9:22561] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/readme.php"] [unique_id "aSLlPfq-c47Q5mW5E9GtIgAAAYQ"]
[Sun Nov 23 18:43:10.599827 2025] [:error] [pid 17534:tid 17555] [client 172.161.94.9:23110] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/readme.php"] [unique_id "aSLlPnPX9nXBrhgM8sxzMQAAAdM"]
[Sun Nov 23 18:43:11.935691 2025] [:error] [pid 16066:tid 16086] [client 172.161.94.9:23308] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/readme.php"] [unique_id "aSLlP_q-c47Q5mW5E9GtKAAAAZE"]
[Sun Nov 23 18:43:13.002286 2025] [:error] [pid 17534:tid 17549] [client 172.161.94.9:23157] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/readme.php"] [unique_id "aSLlQXPX9nXBrhgM8sxzOAAAAc0"]
[Sun Nov 23 18:43:13.807455 2025] [:error] [pid 17534:tid 17540] [client 172.161.94.9:22538] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gmo.php"] [unique_id "aSLlQXPX9nXBrhgM8sxzOwAAAcQ"]
[Sun Nov 23 18:43:14.744932 2025] [:error] [pid 16066:tid 16084] [client 172.161.94.9:23326] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gmo.php"] [unique_id "aSLlQvq-c47Q5mW5E9GtLAAAAY8"]
[Sun Nov 23 18:43:16.289662 2025] [:error] [pid 14602:tid 14635] [client 172.161.94.9:23106] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gmo.php"] [unique_id "aSLlRB-I77jdD81pU-nVawAAAU4"]
[Sun Nov 23 18:43:17.117324 2025] [:error] [pid 44652:tid 44711] [client 172.161.94.9:23119] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/gmo.php"] [unique_id "aSLlRdiQFwsyXQDhwyD6_AAAAQU"]
[Sun Nov 23 18:43:18.735429 2025] [:error] [pid 14602:tid 14621] [client 172.161.94.9:22531] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/autoload_classmap.php"] [unique_id "aSLlRh-I77jdD81pU-nVbwAAAUA"]
[Sun Nov 23 18:43:20.032954 2025] [:error] [pid 38738:tid 38763] [client 172.161.94.9:23119] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/autoload_classmap.php"] [unique_id "aSLlSAytc6TL9XavPmM5_AAAABU"]
[Sun Nov 23 18:43:21.252241 2025] [:error] [pid 38739:tid 38770] [client 172.161.94.9:23143] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/autoload_classmap.php"] [unique_id "aSLlSQdvEgJm2n2cDmpi8AAAAEE"]
[Sun Nov 23 18:43:23.337686 2025] [:error] [pid 17534:tid 17559] [client 172.161.94.9:23313] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/autoload_classmap.php"] [unique_id "aSLlS3PX9nXBrhgM8sxzUgAAAdc"]
[Sun Nov 23 18:43:24.737082 2025] [:error] [pid 38739:tid 38791] [client 172.161.94.9:34820] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSLlTAdvEgJm2n2cDmpi8wAAAFY"]
[Sun Nov 23 18:43:26.931222 2025] [:error] [pid 38738:tid 38764] [client 172.161.94.9:34872] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/BypassBest.php"] [unique_id "aSLlTgytc6TL9XavPmM6CgAAABY"]
[Sun Nov 23 18:43:28.877457 2025] [:error] [pid 17534:tid 17552] [client 172.161.94.9:23133] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/BypassBest.php"] [unique_id "aSLlUHPX9nXBrhgM8sxzXgAAAdA"]
[Sun Nov 23 18:43:30.960061 2025] [:error] [pid 44652:tid 44727] [client 172.161.94.9:23140] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/BypassBest.php"] [unique_id "aSLlUtiQFwsyXQDhwyD7BgAAARU"]
[Sun Nov 23 18:43:33.604803 2025] [:error] [pid 38739:tid 38769] [client 172.161.94.9:23144] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/BypassBest.php"] [unique_id "aSLlVQdvEgJm2n2cDmpjAAAAAEA"]
[Sun Nov 23 18:43:35.418208 2025] [:error] [pid 38739:tid 38792] [client 172.161.94.9:34878] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/nc4.php"] [unique_id "aSLlVwdvEgJm2n2cDmpjAgAAAFc"]
[Sun Nov 23 18:43:36.232191 2025] [:error] [pid 14602:tid 14623] [client 172.161.94.9:23129] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/nc4.php"] [unique_id "aSLlWB-I77jdD81pU-nVgAAAAUI"]
[Sun Nov 23 18:43:37.218485 2025] [:error] [pid 38738:tid 38743] [client 172.161.94.9:22588] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/nc4.php"] [unique_id "aSLlWQytc6TL9XavPmM6FQAAAAE"]
[Sun Nov 23 18:43:38.953855 2025] [:error] [pid 14602:tid 14642] [client 172.161.94.9:22530] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/nc4.php"] [unique_id "aSLlWh-I77jdD81pU-nVhQAAAVU"]
[Sun Nov 23 18:43:40.083615 2025] [:error] [pid 44652:tid 44717] [client 172.161.94.9:34862] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSLlXNiQFwsyXQDhwyD7FAAAAQs"]
[Sun Nov 23 18:43:41.589353 2025] [:error] [pid 38740:tid 38796] [client 172.161.94.9:22545] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSLlXQ13QPZSi6O8umXaMwAAAIA"]
[Sun Nov 23 18:43:42.536162 2025] [:error] [pid 38738:tid 38759] [client 172.161.94.9:22529] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSLlXgytc6TL9XavPmM6HAAAABE"]
[Sun Nov 23 18:43:43.895235 2025] [:error] [pid 16066:tid 16082] [client 172.161.94.9:23319] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSLlX_q-c47Q5mW5E9GtTgAAAY0"]
[Sun Nov 23 18:43:44.911378 2025] [:error] [pid 14602:tid 14629] [client 172.161.94.9:23146] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/g.php"] [unique_id "aSLlYB-I77jdD81pU-nVkwAAAUg"]
[Sun Nov 23 18:43:46.767768 2025] [:error] [pid 17534:tid 17557] [client 172.161.94.9:23155] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/g.php"] [unique_id "aSLlYnPX9nXBrhgM8sxzfAAAAdU"]
[Sun Nov 23 18:43:47.993072 2025] [:error] [pid 14602:tid 14630] [client 172.161.94.9:23134] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/g.php"] [unique_id "aSLlYx-I77jdD81pU-nVlQAAAUk"]
[Sun Nov 23 18:43:49.588012 2025] [:error] [pid 16066:tid 16083] [client 172.161.94.9:34844] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/g.php"] [unique_id "aSLlZfq-c47Q5mW5E9GtVgAAAY4"]
[Sun Nov 23 18:43:51.043069 2025] [:error] [pid 16066:tid 16088] [client 172.161.94.9:23298] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/13.php"] [unique_id "aSLlZ_q-c47Q5mW5E9GtWwAAAZM"]
[Sun Nov 23 18:43:52.180896 2025] [:error] [pid 16066:tid 16092] [client 172.161.94.9:22562] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/13.php"] [unique_id "aSLlaPq-c47Q5mW5E9GtXAAAAZc"]
[Sun Nov 23 18:43:53.553374 2025] [:error] [pid 38738:tid 38750] [client 172.161.94.9:22569] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/13.php"] [unique_id "aSLlaQytc6TL9XavPmM6JwAAAAg"]
[Sun Nov 23 18:43:55.612843 2025] [:error] [pid 38740:tid 38801] [client 172.161.94.9:23126] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/13.php"] [unique_id "aSLlaw13QPZSi6O8umXaPgAAAIU"]
[Sun Nov 23 18:43:57.867415 2025] [:error] [pid 17534:tid 17560] [client 172.161.94.9:23353] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLlbXPX9nXBrhgM8sxzkAAAAdg"]
[Sun Nov 23 18:44:00.224506 2025] [:error] [pid 14602:tid 14642] [client 172.161.94.9:23323] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLlcB-I77jdD81pU-nVnwAAAVU"]
[Sun Nov 23 18:44:01.740118 2025] [:error] [pid 38824:tid 38837] [client 172.161.94.9:23287] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLlcU8WZjXLvbHTHPfsKAAAAMo"]
[Sun Nov 23 18:44:04.182907 2025] [:error] [pid 44652:tid 44727] [client 172.161.94.9:22546] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLldNiQFwsyXQDhwyD7LAAAARU"]
[Sun Nov 23 18:44:06.119149 2025] [:error] [pid 16066:tid 16086] [client 172.161.94.9:23301] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/adminer.php"] [unique_id "aSLldvq-c47Q5mW5E9GtaQAAAZE"]
[Sun Nov 23 18:44:07.443790 2025] [:error] [pid 17534:tid 17554] [client 172.161.94.9:34831] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/adminer.php"] [unique_id "aSLld3PX9nXBrhgM8sxzqAAAAdI"]
[Sun Nov 23 18:44:08.970468 2025] [:error] [pid 38738:tid 38762] [client 172.161.94.9:22570] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/adminer.php"] [unique_id "aSLleAytc6TL9XavPmM6MgAAABQ"]
[Sun Nov 23 18:44:10.219988 2025] [:error] [pid 14602:tid 14644] [client 172.161.94.9:23262] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sun Nov 23 18:44:11.620859 2025] [:error] [pid 14602:tid 14642] [client 172.161.94.9:23262] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSLlex-I77jdD81pU-nVrAAAAVU"]
[Sun Nov 23 18:44:14.522661 2025] [:error] [pid 38738:tid 38745] [client 172.161.94.9:22727] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSLlfgytc6TL9XavPmM6NgAAAAM"]
[Sun Nov 23 18:44:15.970539 2025] [:error] [pid 14602:tid 14625] [client 172.161.94.9:22722] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSLlfx-I77jdD81pU-nVsQAAAUQ"]
[Sun Nov 23 18:44:17.699660 2025] [:error] [pid 38824:tid 38842] [client 172.161.94.9:23342] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSLlgU8WZjXLvbHTHPfsOgAAAM8"]
[Sun Nov 23 18:44:18.485637 2025] [:error] [pid 17534:tid 17537] [client 172.161.94.9:34825] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSLlgnPX9nXBrhgM8sxzxwAAAcE"]
[Sun Nov 23 18:44:19.529476 2025] [:error] [pid 17534:tid 17554] [client 172.161.94.9:23307] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/0.php"] [unique_id "aSLlg3PX9nXBrhgM8sxzzAAAAdI"]
[Sun Nov 23 18:44:20.463000 2025] [:error] [pid 38738:tid 38760] [client 172.161.94.9:23259] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aSLlhAytc6TL9XavPmM6PgAAABI"]
[Sun Nov 23 18:44:22.640087 2025] [:error] [pid 38740:tid 38815] [client 172.161.94.9:23276] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aSLlhg13QPZSi6O8umXacQAAAJM"]
[Sun Nov 23 18:44:24.086278 2025] [:error] [pid 38824:tid 38827] [client 172.161.94.9:34842] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aSLliE8WZjXLvbHTHPfsQgAAAMA"]
[Sun Nov 23 18:44:27.295214 2025] [:error] [pid 16066:tid 16072] [client 172.161.94.9:23272] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aSLli_q-c47Q5mW5E9GtgwAAAYM"]
[Sun Nov 23 18:44:30.262496 2025] [:error] [pid 17534:tid 17542] [client 172.161.94.9:23142] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSLljnPX9nXBrhgM8sxz4gAAAcY"]
[Sun Nov 23 18:44:33.418753 2025] [:error] [pid 16066:tid 16078] [client 172.161.94.9:22550] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/404.php"] [unique_id "aSLlkfq-c47Q5mW5E9GtjAAAAYk"]
[Sun Nov 23 18:44:36.010198 2025] [:error] [pid 14602:tid 14628] [client 172.161.94.9:22565] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/404.php"] [unique_id "aSLllB-I77jdD81pU-nV6gAAAUc"]
[Sun Nov 23 18:44:37.980104 2025] [:error] [pid 44652:tid 44719] [client 172.161.94.9:31220] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/404.php"] [unique_id "aSLlldiQFwsyXQDhwyD7jgAAAQ0"]
[Sun Nov 23 18:44:39.741304 2025] [:error] [pid 16066:tid 16092] [client 172.161.94.9:34826] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/404.php"] [unique_id "aSLll_q-c47Q5mW5E9GtkwAAAZc"]
[Sun Nov 23 18:44:42.001562 2025] [:error] [pid 38824:tid 38842] [client 172.161.94.9:23273] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/i1.php"] [unique_id "aSLlmk8WZjXLvbHTHPfsTwAAAM8"]
[Sun Nov 23 18:44:43.905038 2025] [:error] [pid 38739:tid 38775] [client 172.161.94.9:22738] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/i1.php"] [unique_id "aSLlmwdvEgJm2n2cDmpjagAAAEY"]
[Sun Nov 23 18:44:45.748243 2025] [:error] [pid 14602:tid 14638] [client 172.161.94.9:22739] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/i1.php"] [unique_id "aSLlnR-I77jdD81pU-nV8gAAAVE"]
[Sun Nov 23 18:44:47.237844 2025] [:error] [pid 14602:tid 14644] [client 172.161.94.9:22584] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/i1.php"] [unique_id "aSLlnx-I77jdD81pU-nV9AAAAVc"]
[Sun Nov 23 18:44:48.347126 2025] [:error] [pid 16066:tid 16072] [client 172.161.94.9:34871] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/link.php"] [unique_id "aSLloPq-c47Q5mW5E9GtmQAAAYM"]
[Sun Nov 23 18:44:52.002924 2025] [:error] [pid 17534:tid 17547] [client 172.161.94.9:22734] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/link.php"] [unique_id "aSLlpHPX9nXBrhgM8sxz-gAAAcs"]
[Sun Nov 23 18:44:54.970276 2025] [:error] [pid 14602:tid 14628] [client 172.161.94.9:34849] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/link.php"] [unique_id "aSLlph-I77jdD81pU-nV-AAAAUc"]
[Sun Nov 23 18:44:56.717024 2025] [:error] [pid 44652:tid 44730] [client 172.161.94.9:23349] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/link.php"] [unique_id "aSLlqNiQFwsyXQDhwyD7nQAAARg"]
[Sun Nov 23 18:44:58.772093 2025] [:error] [pid 38824:tid 38836] [client 172.161.94.9:64193] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/m.php"] [unique_id "aSLlqk8WZjXLvbHTHPfsXAAAAMk"]
[Sun Nov 23 18:45:00.432246 2025] [:error] [pid 17534:tid 17555] [client 172.161.94.9:34830] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/m.php"] [unique_id "aSLlrHPX9nXBrhgM8sx0AQAAAdM"]
[Sun Nov 23 18:45:01.703482 2025] [:error] [pid 38739:tid 38792] [client 172.161.94.9:22548] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/m.php"] [unique_id "aSLlrQdvEgJm2n2cDmpjdgAAAFc"]
[Sun Nov 23 18:45:02.413656 2025] [:error] [pid 16066:tid 16080] [client 172.161.94.9:23333] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/m.php"] [unique_id "aSLlrvq-c47Q5mW5E9GtqQAAAYs"]
[Sun Nov 23 18:45:03.726131 2025] [:error] [pid 38824:tid 38848] [client 172.161.94.9:23124] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/js/themes.php"] [unique_id "aSLlr08WZjXLvbHTHPfsZAAAANU"]
[Sun Nov 23 18:45:06.011875 2025] [:error] [pid 44652:tid 44712] [client 172.161.94.9:31207] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/js/themes.php"] [unique_id "aSLlstiQFwsyXQDhwyD7pAAAAQY"]
[Sun Nov 23 18:45:07.186185 2025] [:error] [pid 38824:tid 38831] [client 172.161.94.9:23457] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/js/themes.php"] [unique_id "aSLls08WZjXLvbHTHPfsagAAAMQ"]
[Sun Nov 23 18:45:08.890718 2025] [:error] [pid 38738:tid 38744] [client 172.161.94.9:34847] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/js/themes.php"] [unique_id "aSLltAytc6TL9XavPmM6aAAAAAI"]
[Sun Nov 23 18:45:10.298986 2025] [:error] [pid 14602:tid 14643] [client 172.161.94.9:23145] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/xx.php"] [unique_id "aSLlth-I77jdD81pU-nWDAAAAVY"]
[Sun Nov 23 18:45:11.934015 2025] [:error] [pid 38739:tid 38780] [client 172.161.94.9:22735] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/xx.php"] [unique_id "aSLltwdvEgJm2n2cDmpjgQAAAEs"]
[Sun Nov 23 18:45:14.200010 2025] [:error] [pid 38740:tid 38814] [client 172.161.94.9:23289] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Nov 23 18:45:14.534261 2025] [:error] [pid 38740:tid 38814] [client 172.161.94.9:23289] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Sun Nov 23 18:45:15.373254 2025] [:error] [pid 38740:tid 38798] [client 172.161.94.9:23289] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/17.php"] [unique_id "aSLluw13QPZSi6O8umXarAAAAII"]
[Sun Nov 23 18:45:17.830282 2025] [:error] [pid 16066:tid 16079] [client 172.161.94.9:23288] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/17.php"] [unique_id "aSLlvfq-c47Q5mW5E9GtvgAAAYo"]
[Sun Nov 23 18:45:18.921601 2025] [:error] [pid 17534:tid 17552] [client 172.161.94.9:34828] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/17.php"] [unique_id "aSLlvnPX9nXBrhgM8sx0JAAAAdA"]
[Sun Nov 23 18:45:20.790254 2025] [:error] [pid 38739:tid 38777] [client 172.161.94.9:34832] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/17.php"] [unique_id "aSLlwAdvEgJm2n2cDmpjigAAAEg"]
[Sun Nov 23 18:45:22.323632 2025] [:error] [pid 16066:tid 16072] [client 172.161.94.9:23330] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/0.php"] [unique_id "aSLlwvq-c47Q5mW5E9GtyQAAAYM"]
[Sun Nov 23 18:45:24.635593 2025] [:error] [pid 14602:tid 14644] [client 172.161.94.9:34875] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/0.php"] [unique_id "aSLlxB-I77jdD81pU-nWIwAAAVc"]
[Sun Nov 23 18:45:25.462465 2025] [:error] [pid 38739:tid 38776] [client 172.161.94.9:23458] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/0.php"] [unique_id "aSLlxQdvEgJm2n2cDmpjjwAAAEc"]
[Sun Nov 23 18:45:26.236173 2025] [:error] [pid 16066:tid 16071] [client 172.161.94.9:22764] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/0.php"] [unique_id "aSLlxvq-c47Q5mW5E9GtzgAAAYI"]
[Sun Nov 23 18:45:28.025574 2025] [:error] [pid 44652:tid 44713] [client 172.161.94.9:23285] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSLlyNiQFwsyXQDhwyD7zQAAAQc"]
[Sun Nov 23 18:45:30.258631 2025] [:error] [pid 16066:tid 16078] [client 172.161.94.9:23316] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSLlyvq-c47Q5mW5E9Gt6gAAAYk"]
[Sun Nov 23 18:45:31.928594 2025] [:error] [pid 17534:tid 17548] [client 172.161.94.9:23261] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSLly3PX9nXBrhgM8sx0UQAAAcw"]
[Sun Nov 23 18:45:33.838791 2025] [:error] [pid 38740:tid 38799] [client 172.161.94.9:23166] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSLlzQ13QPZSi6O8umXawwAAAIM"]
[Sun Nov 23 18:45:34.685909 2025] [:error] [pid 38740:tid 38809] [client 172.161.94.9:22737] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-configs.php"] [unique_id "aSLlzg13QPZSi6O8umXaxwAAAI0"]
[Sun Nov 23 18:45:36.849591 2025] [:error] [pid 38824:tid 38842] [client 172.161.94.9:23426] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-configs.php"] [unique_id "aSLl0E8WZjXLvbHTHPfsjAAAAM8"]
[Sun Nov 23 18:45:38.707675 2025] [:error] [pid 44652:tid 44721] [client 172.161.94.9:64207] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-configs.php"] [unique_id "aSLl0tiQFwsyXQDhwyD78AAAAQ8"]
[Sun Nov 23 18:45:40.089787 2025] [:error] [pid 17534:tid 17550] [client 172.161.94.9:22580] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-configs.php"] [unique_id "aSLl1HPX9nXBrhgM8sx0aQAAAc4"]
[Sun Nov 23 18:45:41.011778 2025] [:error] [pid 44652:tid 44725] [client 172.161.94.9:31177] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSLl1diQFwsyXQDhwyD8DAAAARM"]
[Sun Nov 23 18:45:42.952983 2025] [:error] [pid 16066:tid 16087] [client 172.161.94.9:23445] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/click.php"] [unique_id "aSLl1vq-c47Q5mW5E9Gt8gAAAZI"]
[Sun Nov 23 18:45:45.523739 2025] [:error] [pid 44652:tid 44717] [client 172.161.94.9:22768] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/click.php"] [unique_id "aSLl2diQFwsyXQDhwyD8IAAAAQs"]
[Sun Nov 23 18:45:47.475252 2025] [:error] [pid 17534:tid 17553] [client 172.161.94.9:34848] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/click.php"] [unique_id "aSLl23PX9nXBrhgM8sx0dgAAAdE"]
[Sun Nov 23 18:45:48.790292 2025] [:error] [pid 38824:tid 38835] [client 172.161.94.9:31185] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/click.php"] [unique_id "aSLl3E8WZjXLvbHTHPfsmwAAAMg"]
[Sun Nov 23 18:45:51.064208 2025] [:error] [pid 38740:tid 38797] [client 172.161.94.9:64210] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/install.php"] [unique_id "aSLl3w13QPZSi6O8umXa4AAAAIE"]
[Sun Nov 23 18:45:52.755298 2025] [:error] [pid 38738:tid 38747] [client 172.161.94.9:34855] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/install.php"] [unique_id "aSLl4Aytc6TL9XavPmM6rQAAAAU"]
[Sun Nov 23 18:45:55.068447 2025] [:error] [pid 38738:tid 38750] [client 172.161.94.9:31201] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/install.php"] [unique_id "aSLl4wytc6TL9XavPmM6sQAAAAg"]
[Sun Nov 23 18:45:56.773386 2025] [:error] [pid 38738:tid 38743] [client 172.161.94.9:34837] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/install.php"] [unique_id "aSLl5Aytc6TL9XavPmM6tAAAAAE"]
[Sun Nov 23 18:45:59.010740 2025] [:error] [pid 38740:tid 38803] [client 172.161.94.9:22728] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/10.php"] [unique_id "aSLl5w13QPZSi6O8umXa6AAAAIc"]
[Sun Nov 23 18:46:00.400492 2025] [:error] [pid 17534:tid 17552] [client 172.161.94.9:22749] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/10.php"] [unique_id "aSLl6HPX9nXBrhgM8sx0hwAAAdA"]
[Sun Nov 23 18:46:02.870481 2025] [:error] [pid 38824:tid 38833] [client 172.161.94.9:64243] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/10.php"] [unique_id "aSLl6k8WZjXLvbHTHPfspQAAAMY"]
[Sun Nov 23 18:46:04.169879 2025] [:error] [pid 17534:tid 17542] [client 172.161.94.9:23442] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/10.php"] [unique_id "aSLl7HPX9nXBrhgM8sx0jwAAAcY"]
[Sun Nov 23 18:46:05.450810 2025] [:error] [pid 14602:tid 14631] [client 172.161.94.9:31223] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/goat1.php"] [unique_id "aSLl7R-I77jdD81pU-nWPgAAAUo"]
[Sun Nov 23 18:46:06.858102 2025] [:error] [pid 14602:tid 14645] [client 172.161.94.9:22546] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/goat1.php"] [unique_id "aSLl7h-I77jdD81pU-nWQQAAAVg"]
[Sun Nov 23 18:46:09.304942 2025] [:error] [pid 14602:tid 14642] [client 172.161.94.9:64226] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/goat1.php"] [unique_id "aSLl8R-I77jdD81pU-nWQwAAAVU"]
[Sun Nov 23 18:46:10.579289 2025] [:error] [pid 17534:tid 17560] [client 172.161.94.9:31181] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/goat1.php"] [unique_id "aSLl8nPX9nXBrhgM8sx0lgAAAdg"]
[Sun Nov 23 18:46:11.781510 2025] [:error] [pid 17534:tid 17555] [client 172.161.94.9:23448] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/yu.php"] [unique_id "aSLl83PX9nXBrhgM8sx0mwAAAdM"]
[Sun Nov 23 18:46:13.407246 2025] [:error] [pid 16066:tid 16082] [client 172.161.94.9:23480] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/yu.php"] [unique_id "aSLl9fq-c47Q5mW5E9GuDwAAAY0"]
[Sun Nov 23 18:46:14.146632 2025] [:error] [pid 17534:tid 17556] [client 172.161.94.9:23139] File does not exist: /usr/local/apache/htdocs/suspended-page/yu.php
[Sun Nov 23 18:46:20.939492 2025] [:error] [pid 16066:tid 16077] [client 172.161.94.9:52567] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/Marvins.php"] [unique_id "aSLl_Pq-c47Q5mW5E9GuHAAAAYg"]
[Sun Nov 23 18:46:23.139560 2025] [:error] [pid 44652:tid 44721] [client 172.161.94.9:23131] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/Marvins.php"] [unique_id "aSLl_9iQFwsyXQDhwyD8SAAAAQ8"]
[Sun Nov 23 18:46:24.503950 2025] [:error] [pid 44652:tid 44708] [client 172.161.94.9:23479] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/Marvins.php"] [unique_id "aSLmANiQFwsyXQDhwyD8SgAAAQI"]
[Sun Nov 23 18:46:27.294126 2025] [:error] [pid 14602:tid 14628] [client 172.161.94.9:23441] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/Marvins.php"] [unique_id "aSLmAx-I77jdD81pU-nWXwAAAUc"]
[Sun Nov 23 18:46:30.885014 2025] [:error] [pid 38739:tid 38793] [client 172.161.94.9:31203] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/admin.php"] [unique_id "aSLmBgdvEgJm2n2cDmpj6QAAAFg"]
[Sun Nov 23 18:46:33.769699 2025] [:error] [pid 38824:tid 38835] [client 172.161.94.9:23452] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/admin.php"] [unique_id "aSLmCU8WZjXLvbHTHPfsxAAAAMg"]
[Sun Nov 23 18:46:35.154101 2025] [:error] [pid 17534:tid 17550] [client 172.161.94.9:34840] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/admin.php"] [unique_id "aSLmC3PX9nXBrhgM8sx0rgAAAc4"]
[Sun Nov 23 18:46:40.205908 2025] [:error] [pid 38740:tid 38816] [client 172.161.94.9:23385] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/admin.php"] [unique_id "aSLmEA13QPZSi6O8umXbGwAAAJQ"]
[Sun Nov 23 18:46:41.212622 2025] [:error] [pid 17534:tid 17559] [client 172.161.94.9:23432] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/124.php"] [unique_id "aSLmEXPX9nXBrhgM8sx0uwAAAdc"]
[Sun Nov 23 18:46:45.652223 2025] [:error] [pid 38738:tid 38751] [client 172.161.94.9:31224] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/124.php"] [unique_id "aSLmFQytc6TL9XavPmM6zAAAAAk"]
[Sun Nov 23 18:46:49.962604 2025] [:error] [pid 38824:tid 38833] [client 172.161.94.9:23481] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/124.php"] [unique_id "aSLmGU8WZjXLvbHTHPfs0AAAAMY"]
[Sun Nov 23 18:46:54.899462 2025] [:error] [pid 16066:tid 16071] [client 172.161.94.9:64247] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/124.php"] [unique_id "aSLmHvq-c47Q5mW5E9GuSAAAAYI"]
[Sun Nov 23 18:46:56.873828 2025] [:error] [pid 16066:tid 16072] [client 172.161.94.9:64249] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSLmIPq-c47Q5mW5E9GuTAAAAYM"]
[Sun Nov 23 18:46:58.697207 2025] [:error] [pid 44652:tid 44718] [client 172.161.94.9:34860] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSLmItiQFwsyXQDhwyD8mQAAAQw"]
[Sun Nov 23 18:47:00.579683 2025] [:error] [pid 14602:tid 14626] [client 172.161.94.9:64204] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSLmJB-I77jdD81pU-nWeAAAAUU"]
[Sun Nov 23 18:47:02.763895 2025] [:error] [pid 17534:tid 17541] [client 172.161.94.9:31176] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSLmJnPX9nXBrhgM8sx05AAAAcU"]
[Sun Nov 23 18:47:05.869102 2025] [:error] [pid 44652:tid 44708] [client 172.161.94.9:52562] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/q.php"] [unique_id "aSLmKdiQFwsyXQDhwyD8oAAAAQI"]
[Sun Nov 23 18:47:08.696352 2025] [:error] [pid 16066:tid 16075] [client 172.161.94.9:64236] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/q.php"] [unique_id "aSLmLPq-c47Q5mW5E9GuWgAAAYY"]
[Sun Nov 23 18:47:10.782709 2025] [:error] [pid 14602:tid 14625] [client 172.161.94.9:64295] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/q.php"] [unique_id "aSLmLh-I77jdD81pU-nWfQAAAUQ"]
[Sun Nov 23 18:47:12.750056 2025] [:error] [pid 16066:tid 16081] [client 172.161.94.9:64265] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/q.php"] [unique_id "aSLmMPq-c47Q5mW5E9GuXQAAAYw"]
[Sun Nov 23 18:47:14.207133 2025] [:error] [pid 16066:tid 16083] [client 172.161.94.9:64281] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/123.php"] [unique_id "aSLmMvq-c47Q5mW5E9GuYAAAAY4"]
[Sun Nov 23 18:47:15.626354 2025] [:error] [pid 17534:tid 17556] [client 172.161.94.9:64212] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/123.php"] [unique_id "aSLmM3PX9nXBrhgM8sx07gAAAdQ"]
[Sun Nov 23 18:47:17.353022 2025] [:error] [pid 44652:tid 44728] [client 172.161.94.9:22773] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/123.php"] [unique_id "aSLmNdiQFwsyXQDhwyD8qQAAARY"]
[Sun Nov 23 18:47:18.813865 2025] [:error] [pid 38824:tid 38839] [client 172.161.94.9:64217] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/123.php"] [unique_id "aSLmNk8WZjXLvbHTHPfs3QAAAMw"]
[Sun Nov 23 18:47:21.013822 2025] [:error] [pid 44652:tid 44729] [client 172.161.94.9:64301] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Nov 23 18:47:21.494673 2025] [:error] [pid 44652:tid 44730] [client 172.161.94.9:64301] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Sun Nov 23 18:47:21.994265 2025] [:error] [pid 44652:tid 44716] [client 172.161.94.9:64301] File does not exist: /usr/local/apache/htdocs/suspended-page/sk.php
[Sun Nov 23 18:47:22.233002 2025] [:error] [pid 44652:tid 44728] [client 172.161.94.9:64301] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-crom.php
[Sun Nov 23 18:47:22.471744 2025] [:error] [pid 44652:tid 44722] [client 172.161.94.9:64301] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Sun Nov 23 18:47:22.960025 2025] [:error] [pid 44652:tid 44723] [client 172.161.94.9:64301] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/1100.php"] [unique_id "aSLmOtiQFwsyXQDhwyD8vAAAARE"]
[Sun Nov 23 18:47:25.746701 2025] [:error] [pid 17534:tid 17557] [client 172.161.94.9:23335] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/1100.php"] [unique_id "aSLmPXPX9nXBrhgM8sx1AQAAAdU"]
[Sun Nov 23 18:47:27.075324 2025] [:error] [pid 38738:tid 38759] [client 172.161.94.9:64318] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/1100.php"] [unique_id "aSLmPwytc6TL9XavPmM64gAAABE"]
[Sun Nov 23 18:47:29.576452 2025] [:error] [pid 16066:tid 16076] [client 172.161.94.9:23483] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/1100.php"] [unique_id "aSLmQfq-c47Q5mW5E9GucQAAAYc"]
[Sun Nov 23 18:47:32.774352 2025] [:error] [pid 44652:tid 44709] [client 172.161.94.9:23355] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/403.php"] [unique_id "aSLmRNiQFwsyXQDhwyD8vwAAAQM"]
[Sun Nov 23 18:47:34.103621 2025] [:error] [pid 16066:tid 16086] [client 172.161.94.9:31189] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/403.php"] [unique_id "aSLmRvq-c47Q5mW5E9GucwAAAZE"]
[Sun Nov 23 18:47:36.559338 2025] [:error] [pid 44652:tid 44723] [client 172.161.94.9:52600] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/403.php"] [unique_id "aSLmSNiQFwsyXQDhwyD8xgAAARE"]
[Sun Nov 23 18:47:38.014954 2025] [:error] [pid 38738:tid 38756] [client 172.161.94.9:64240] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/403.php"] [unique_id "aSLmSgytc6TL9XavPmM67QAAAA4"]
[Sun Nov 23 18:47:40.892654 2025] [:error] [pid 38738:tid 38750] [client 172.161.94.9:64289] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSLmTAytc6TL9XavPmM68AAAAAg"]
[Sun Nov 23 18:47:42.429107 2025] [:error] [pid 38738:tid 38755] [client 172.161.94.9:31180] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSLmTgytc6TL9XavPmM69AAAAA0"]
[Sun Nov 23 18:47:46.659747 2025] [:error] [pid 38824:tid 38847] [client 172.161.94.9:22535] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSLmUk8WZjXLvbHTHPfs-gAAANQ"]
[Sun Nov 23 18:47:50.802528 2025] [:error] [pid 44652:tid 44717] [client 172.161.94.9:23415] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSLmVtiQFwsyXQDhwyD88AAAAQs"]
[Sun Nov 23 18:47:52.186588 2025] [:error] [pid 14602:tid 14637] [client 172.161.94.9:64232] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/lock360.php"] [unique_id "aSLmWB-I77jdD81pU-nWogAAAVA"]
[Sun Nov 23 18:47:54.318774 2025] [:error] [pid 38824:tid 38833] [client 172.161.94.9:23118] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/lock360.php"] [unique_id "aSLmWk8WZjXLvbHTHPftAAAAAMY"]
[Sun Nov 23 18:47:56.351298 2025] [:error] [pid 38740:tid 38813] [client 172.161.94.9:23329] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/lock360.php"] [unique_id "aSLmXA13QPZSi6O8umXbVwAAAJE"]
[Sun Nov 23 18:47:57.692224 2025] [:error] [pid 38740:tid 38819] [client 172.161.94.9:22576] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/lock360.php"] [unique_id "aSLmXQ13QPZSi6O8umXbWwAAAJc"]
[Sun Nov 23 18:47:59.046635 2025] [:error] [pid 17534:tid 17547] [client 172.161.94.9:23338] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/up.php"] [unique_id "aSLmX3PX9nXBrhgM8sx1MAAAAcs"]
[Sun Nov 23 18:48:01.806177 2025] [:error] [pid 17534:tid 17540] [client 172.161.94.9:23350] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/up.php"] [unique_id "aSLmYXPX9nXBrhgM8sx1MQAAAcQ"]
[Sun Nov 23 18:48:03.130532 2025] [:error] [pid 38738:tid 38763] [client 172.161.94.9:22740] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/up.php"] [unique_id "aSLmYwytc6TL9XavPmM7GAAAABU"]
[Sun Nov 23 18:48:04.580441 2025] [:error] [pid 38824:tid 38827] [client 172.161.94.9:22531] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/up.php"] [unique_id "aSLmZE8WZjXLvbHTHPftDQAAAMA"]
[Sun Nov 23 18:48:06.773045 2025] [:error] [pid 17534:tid 17548] [client 172.161.94.9:31225] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/sim.php"] [unique_id "aSLmZnPX9nXBrhgM8sx1NwAAAcw"]
[Sun Nov 23 18:48:07.423815 2025] [:error] [pid 38824:tid 38833] [client 172.161.94.9:63458] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/sim.php"] [unique_id "aSLmZ08WZjXLvbHTHPftDwAAAMY"]
[Sun Nov 23 18:48:08.373253 2025] [:error] [pid 16066:tid 16092] [client 172.161.94.9:22568] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/sim.php"] [unique_id "aSLmaPq-c47Q5mW5E9GuqAAAAZc"]
[Sun Nov 23 18:48:09.334715 2025] [:error] [pid 17534:tid 17553] [client 172.161.94.9:52570] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/sim.php"] [unique_id "aSLmaXPX9nXBrhgM8sx1OQAAAdE"]
[Sun Nov 23 18:48:10.952742 2025] [:error] [pid 17534:tid 17554] [client 172.161.94.9:23300] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ioxi-o.php"] [unique_id "aSLmanPX9nXBrhgM8sx1OwAAAdI"]
[Sun Nov 23 18:48:11.673820 2025] [:error] [pid 44652:tid 44716] [client 172.161.94.9:23140] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ioxi-o.php"] [unique_id "aSLma9iQFwsyXQDhwyD9BgAAAQo"]
[Sun Nov 23 18:48:12.616875 2025] [:error] [pid 38824:tid 38835] [client 172.161.94.9:52559] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ioxi-o.php"] [unique_id "aSLmbE8WZjXLvbHTHPftFgAAAMg"]
[Sun Nov 23 18:48:13.496603 2025] [:error] [pid 44652:tid 44708] [client 172.161.94.9:22567] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ioxi-o.php"] [unique_id "aSLmbdiQFwsyXQDhwyD9BwAAAQI"]
[Sun Nov 23 18:48:14.159214 2025] [:error] [pid 38738:tid 38751] [client 172.161.94.9:23346] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/oo.php"] [unique_id "aSLmbgytc6TL9XavPmM7HgAAAAk"]
[Sun Nov 23 18:48:15.870340 2025] [:error] [pid 44652:tid 44715] [client 172.161.94.9:22559] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/oo.php"] [unique_id "aSLmb9iQFwsyXQDhwyD9EwAAAQk"]
[Sun Nov 23 18:48:16.797649 2025] [:error] [pid 14602:tid 14644] [client 172.161.94.9:23268] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/oo.php"] [unique_id "aSLmcB-I77jdD81pU-nWrwAAAVc"]
[Sun Nov 23 18:48:18.108110 2025] [:error] [pid 38740:tid 38812] [client 172.161.94.9:23358] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/oo.php"] [unique_id "aSLmcg13QPZSi6O8umXbcAAAAJA"]
[Sun Nov 23 18:48:19.803410 2025] [:error] [pid 44652:tid 44708] [client 172.161.94.9:22569] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/alfanew.php"] [unique_id "aSLmc9iQFwsyXQDhwyD9GQAAAQI"]
[Sun Nov 23 18:48:21.558598 2025] [:error] [pid 16066:tid 16074] [client 172.161.94.9:64290] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/alfanew.php"] [unique_id "aSLmdfq-c47Q5mW5E9GurgAAAYU"]
[Sun Nov 23 18:48:22.886862 2025] [:error] [pid 44652:tid 44707] [client 172.161.94.9:23305] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Sun Nov 23 18:48:23.344473 2025] [:error] [pid 44652:tid 44723] [client 172.161.94.9:23305] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSLmd9iQFwsyXQDhwyD9HwAAARE"]
[Sun Nov 23 18:48:24.049509 2025] [:error] [pid 44652:tid 44715] [client 172.161.94.9:23406] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSLmeNiQFwsyXQDhwyD9JQAAAQk"]
[Sun Nov 23 18:48:25.462473 2025] [:error] [pid 44652:tid 44730] [client 172.161.94.9:52585] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSLmediQFwsyXQDhwyD9KQAAARg"]
[Sun Nov 23 18:48:26.748279 2025] [:error] [pid 38739:tid 38790] [client 172.161.94.9:22761] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSLmegdvEgJm2n2cDmpkbAAAAFU"]
[Sun Nov 23 18:48:27.948439 2025] [:error] [pid 38739:tid 38778] [client 172.161.94.9:23152] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ll.php"] [unique_id "aSLmewdvEgJm2n2cDmpkbwAAAEk"]
[Sun Nov 23 18:48:30.777615 2025] [:error] [pid 14602:tid 14643] [client 172.161.94.9:23260] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ll.php"] [unique_id "aSLmfh-I77jdD81pU-nWvAAAAVY"]
[Sun Nov 23 18:48:33.059222 2025] [:error] [pid 38740:tid 38804] [client 172.161.94.9:23461] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ll.php"] [unique_id "aSLmgQ13QPZSi6O8umXbdQAAAIg"]
[Sun Nov 23 18:48:34.124481 2025] [:error] [pid 17534:tid 17550] [client 172.161.94.9:23112] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ll.php"] [unique_id "aSLmgnPX9nXBrhgM8sx1WQAAAc4"]
[Sun Nov 23 18:48:36.148080 2025] [:error] [pid 14602:tid 14645] [client 172.161.94.9:52602] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSLmhB-I77jdD81pU-nWxAAAAVg"]
[Sun Nov 23 18:48:37.426732 2025] [:error] [pid 16066:tid 16075] [client 172.161.94.9:23144] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ee.php"] [unique_id "aSLmhfq-c47Q5mW5E9GuuwAAAYY"]
[Sun Nov 23 18:48:38.393133 2025] [:error] [pid 38738:tid 38760] [client 172.161.94.9:23155] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ee.php"] [unique_id "aSLmhgytc6TL9XavPmM7JgAAABI"]
[Sun Nov 23 18:48:40.417864 2025] [:error] [pid 38739:tid 38773] [client 172.161.94.9:23259] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ee.php"] [unique_id "aSLmiAdvEgJm2n2cDmpkegAAAEQ"]
[Sun Nov 23 18:48:42.303732 2025] [:error] [pid 38740:tid 38815] [client 172.161.94.9:23376] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/ee.php"] [unique_id "aSLmig13QPZSi6O8umXbegAAAJM"]
[Sun Nov 23 18:48:44.187201 2025] [:error] [pid 16066:tid 16091] [client 172.161.94.9:23157] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/product.php"] [unique_id "aSLmjPq-c47Q5mW5E9GuwQAAAZY"]
[Sun Nov 23 18:48:45.803411 2025] [:error] [pid 17534:tid 17543] [client 172.161.94.9:64225] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/product.php"] [unique_id "aSLmjXPX9nXBrhgM8sx1YQAAAcc"]
[Sun Nov 23 18:48:47.128919 2025] [:error] [pid 17534:tid 17553] [client 172.161.94.9:64250] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/product.php"] [unique_id "aSLmj3PX9nXBrhgM8sx1ZgAAAdE"]
[Sun Nov 23 18:48:49.464941 2025] [:error] [pid 38740:tid 38803] [client 172.161.94.9:34834] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/product.php"] [unique_id "aSLmkQ13QPZSi6O8umXbfgAAAIc"]
[Sun Nov 23 18:48:53.456614 2025] [:error] [pid 38739:tid 38786] [client 172.161.94.9:34842] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wi.php"] [unique_id "aSLmlQdvEgJm2n2cDmpkhwAAAFE"]
[Sun Nov 23 18:48:55.871769 2025] [:error] [pid 38824:tid 38833] [client 172.161.94.9:23353] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wi.php"] [unique_id "aSLml08WZjXLvbHTHPftKgAAAMY"]
[Sun Nov 23 18:48:58.831940 2025] [:error] [pid 17534:tid 17555] [client 172.161.94.9:23130] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wi.php"] [unique_id "aSLmmnPX9nXBrhgM8sx1jgAAAdM"]
[Sun Nov 23 18:48:59.994206 2025] [:error] [pid 17534:tid 17544] [client 172.161.94.9:62865] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wi.php"] [unique_id "aSLmm3PX9nXBrhgM8sx1kgAAAcg"]
[Sun Nov 23 18:49:01.589349 2025] [:error] [pid 38739:tid 38779] [client 172.161.94.9:52561] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/mms.php"] [unique_id "aSLmnQdvEgJm2n2cDmpkuQAAAEo"]
[Sun Nov 23 18:49:05.062878 2025] [:error] [pid 17534:tid 17539] [client 172.161.94.9:62872] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/mms.php"] [unique_id "aSLmoXPX9nXBrhgM8sx1lgAAAcM"]
[Sun Nov 23 18:49:06.331109 2025] [:error] [pid 38739:tid 38771] [client 172.161.94.9:23156] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/mms.php"] [unique_id "aSLmogdvEgJm2n2cDmpkvAAAAEI"]
[Sun Nov 23 18:49:08.702323 2025] [:error] [pid 38824:tid 38849] [client 172.161.94.9:62899] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/mms.php"] [unique_id "aSLmpE8WZjXLvbHTHPftMgAAANY"]
[Sun Nov 23 18:49:10.516798 2025] [:error] [pid 38740:tid 38796] [client 172.161.94.9:22994] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLmpg13QPZSi6O8umXblQAAAIA"]
[Sun Nov 23 18:49:12.856944 2025] [:error] [pid 38738:tid 38758] [client 172.161.94.9:62899] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v4.php"] [unique_id "aSLmqAytc6TL9XavPmM7QwAAABA"]
[Sun Nov 23 18:49:14.216837 2025] [:error] [pid 14602:tid 14641] [client 172.161.94.9:34865] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v4.php"] [unique_id "aSLmqh-I77jdD81pU-nW3gAAAVQ"]
[Sun Nov 23 18:49:16.047748 2025] [:error] [pid 16066:tid 16079] [client 172.161.94.9:64223] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v4.php"] [unique_id "aSLmrPq-c47Q5mW5E9Gu7QAAAYo"]
[Sun Nov 23 18:49:18.765994 2025] [:error] [pid 38740:tid 38816] [client 172.161.94.9:62907] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/v4.php"] [unique_id "aSLmrg13QPZSi6O8umXbmgAAAJQ"]
[Sun Nov 23 18:49:21.960899 2025] [:error] [pid 17534:tid 17559] [client 172.161.94.9:64270] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-mn.php"] [unique_id "aSLmsXPX9nXBrhgM8sx1rQAAAdc"]
[Sun Nov 23 18:49:25.116839 2025] [:error] [pid 38739:tid 38777] [client 172.161.94.9:23036] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php
[Sun Nov 23 18:49:25.551009 2025] [:error] [pid 38739:tid 38782] [client 172.161.94.9:23036] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Nov 23 18:49:26.032083 2025] [:error] [pid 38739:tid 38769] [client 172.161.94.9:23036] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Nov 23 18:49:26.308589 2025] [:error] [pid 38739:tid 38780] [client 172.161.94.9:23036] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "jandakotpilotshop.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSLmtgdvEgJm2n2cDmpk7gAAAEs"]
[Sun Nov 23 18:49:28.878329 2025] [:error] [pid 14602:tid 14627] [client 172.161.94.9:23005] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/po.php"] [unique_id "aSLmuB-I77jdD81pU-nW6wAAAUY"]
[Sun Nov 23 18:49:30.923175 2025] [:error] [pid 17534:tid 17536] [client 172.161.94.9:34831] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/po.php"] [unique_id "aSLmunPX9nXBrhgM8sx1tAAAAcA"]
[Sun Nov 23 18:49:31.898633 2025] [:error] [pid 38738:tid 38760] [client 172.161.94.9:22984] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/po.php"] [unique_id "aSLmuwytc6TL9XavPmM7SgAAABI"]
[Sun Nov 23 18:49:33.699291 2025] [:error] [pid 38738:tid 38764] [client 172.161.94.9:22993] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/po.php"] [unique_id "aSLmvQytc6TL9XavPmM7UQAAABY"]
[Sun Nov 23 18:49:35.768383 2025] [:error] [pid 14602:tid 14639] [client 172.161.94.9:62888] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/zews.php"] [unique_id "aSLmvx-I77jdD81pU-nW9AAAAVI"]
[Sun Nov 23 18:49:37.205949 2025] [:error] [pid 38739:tid 38776] [client 172.161.94.9:22999] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/zews.php"] [unique_id "aSLmwQdvEgJm2n2cDmpk8QAAAEc"]
[Sun Nov 23 18:49:38.721810 2025] [:error] [pid 38824:tid 38830] [client 172.161.94.9:23015] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/zews.php"] [unique_id "aSLmwk8WZjXLvbHTHPftVQAAAMM"]
[Sun Nov 23 18:49:40.304638 2025] [:error] [pid 38739:tid 38781] [client 172.161.94.9:22536] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/zews.php"] [unique_id "aSLmxAdvEgJm2n2cDmpk9QAAAEw"]
[Sun Nov 23 18:49:42.126531 2025] [:error] [pid 38739:tid 38786] [client 172.161.94.9:23335] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSLmxgdvEgJm2n2cDmpk-AAAAFE"]
[Sun Nov 23 18:49:45.158288 2025] [:error] [pid 44652:tid 44711] [client 172.161.94.9:23266] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSLmydiQFwsyXQDhwyD9gwAAAQU"]
[Sun Nov 23 18:49:47.628714 2025] [:error] [pid 16066:tid 16085] [client 172.161.94.9:23134] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSLmy_q-c47Q5mW5E9Gu_QAAAZA"]
[Sun Nov 23 18:49:49.601608 2025] [:error] [pid 38740:tid 38803] [client 172.161.94.9:23129] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSLmzQ13QPZSi6O8umXbswAAAIc"]
[Sun Nov 23 18:49:52.298735 2025] [:error] [pid 38739:tid 38785] [client 172.161.94.9:23147] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/usage-file.php"] [unique_id "aSLm0AdvEgJm2n2cDmplAQAAAFA"]
[Sun Nov 23 18:49:55.767939 2025] [:error] [pid 16066:tid 16071] [client 172.161.94.9:34833] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/usage-file.php"] [unique_id "aSLm0_q-c47Q5mW5E9GvBgAAAYI"]
[Sun Nov 23 18:50:00.362004 2025] [:error] [pid 38740:tid 38801] [client 172.161.94.9:23158] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/usage-file.php"] [unique_id "aSLm2A13QPZSi6O8umXbvwAAAIU"]
[Sun Nov 23 18:50:03.890119 2025] [:error] [pid 44652:tid 44715] [client 172.161.94.9:34858] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/usage-file.php"] [unique_id "aSLm29iQFwsyXQDhwyD9kgAAAQk"]
[Sun Nov 23 18:50:10.545233 2025] [:error] [pid 38738:tid 38762] [client 172.161.94.9:34841] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/assets/js/wp-config.php"] [unique_id "aSLm4gytc6TL9XavPmM7dwAAABQ"]
[Sun Nov 23 18:50:12.869014 2025] [:error] [pid 38824:tid 38847] [client 172.161.94.9:34816] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/Js.php"] [unique_id "aSLm5E8WZjXLvbHTHPftZQAAANQ"]
[Sun Nov 23 18:50:15.053336 2025] [:error] [pid 16066:tid 16092] [client 172.161.94.9:34879] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/Js.php"] [unique_id "aSLm5_q-c47Q5mW5E9GvEwAAAZc"]
[Sun Nov 23 18:50:17.591392 2025] [:error] [pid 17534:tid 17554] [client 172.161.94.9:23331] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/Js.php"] [unique_id "aSLm6XPX9nXBrhgM8sx16QAAAdI"]
[Sun Nov 23 18:50:19.226020 2025] [:error] [pid 38739:tid 38772] [client 172.161.94.9:63361] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/Js.php"] [unique_id "aSLm6wdvEgJm2n2cDmplGwAAAEM"]
[Sun Nov 23 18:50:21.178381 2025] [:error] [pid 38738:tid 38752] [client 172.161.94.9:63377] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/menu.php"] [unique_id "aSLm7Qytc6TL9XavPmM7eQAAAAo"]
[Sun Nov 23 18:50:22.566753 2025] [:error] [pid 38740:tid 38805] [client 172.161.94.9:63373] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/menu.php"] [unique_id "aSLm7g13QPZSi6O8umXbyQAAAIk"]
[Sun Nov 23 18:50:24.932221 2025] [:error] [pid 17534:tid 17558] [client 172.161.94.9:63394] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/menu.php"] [unique_id "aSLm8HPX9nXBrhgM8sx2PgAAAdY"]
[Sun Nov 23 18:50:26.129024 2025] [:error] [pid 16066:tid 16080] [client 172.161.94.9:34863] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/menu.php"] [unique_id "aSLm8vq-c47Q5mW5E9GvHgAAAYs"]
[Sun Nov 23 18:50:28.260079 2025] [:error] [pid 14602:tid 14622] [client 172.161.94.9:22990] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Nov 23 18:50:28.818716 2025] [:error] [pid 14602:tid 14624] [client 172.161.94.9:22990] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php
[Sun Nov 23 18:50:29.057887 2025] [:error] [pid 14602:tid 14627] [client 172.161.94.9:22990] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sun Nov 23 18:50:29.405589 2025] [:error] [pid 14602:tid 14644] [client 172.161.94.9:22990] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Nov 23 19:01:34.603521 2025] [:error] [pid 17534:tid 17536] [client 176.65.132.18:60974] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aSLpjnPX9nXBrhgM8sx6CAAAAcA"]
[Sun Nov 23 22:46:26.705183 2025] [:error] [pid 16066:tid 16089] [client 43.157.52.37:50366] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aSMeQvq-c47Q5mW5E9HZuwAAAZQ"]
[Mon Nov 24 03:22:15.182295 2025] [:error] [pid 1452:tid 1462] [client 176.65.132.18:38530] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aSNe5xKZkEEyVNVXr_niLAAAAEU"]
[Mon Nov 24 05:39:14.967082 2025] [:error] [pid 53508:tid 53526] [client 51.103.255.157:18778] [client 51.103.255.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/bk"] [unique_id "aSN_Am639qxbKCcL09y5SwAAARA"]
[Mon Nov 24 08:19:10.478937 2025] [:error] [pid 49900:tid 49908] [client 103.65.237.124:59841] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/sftp-config.json"] [unique_id "aSOkfjCyPLrvg06aorlkDQAAAAY"]
[Mon Nov 24 11:26:03.520089 2025] [:error] [pid 16441:tid 16457] [client 49.47.155.205:56421] [client 49.47.155.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.155.205, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aSPQS4q_bc5MOa9Hflm54wAAAI0"]
[Mon Nov 24 11:26:03.527320 2025] [:error] [pid 16441:tid 16457] [client 49.47.155.205:56421] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Nov 24 12:04:02.613300 2025] [:error] [pid 9630:tid 9644] [client 182.42.110.255:59877] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aSPZMirSgUgPGkizt2qdFgAAAEw"]
[Mon Nov 24 15:04:58.068655 2025] [:error] [pid 16516:tid 16539] [client 129.226.93.214:34552] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jandakotpilotshop.com"] [uri "/"] [unique_id "aSQDmvqZbniwaNwL8XnR9AAAARQ"]
[Tue Nov 25 12:27:31.341865 2025] [:error] [pid 14076:tid 14101] [client 161.35.231.74:60288] [client 161.35.231.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.231.74, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSUwM3sB4Gz6Qw-pvBuLUQAAABQ"]
[Tue Nov 25 12:27:31.348946 2025] [:error] [pid 14076:tid 14101] [client 161.35.231.74:60288] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 12:27:32.171903 2025] [:error] [pid 14078:tid 14142] [client 161.35.231.74:60300] [client 161.35.231.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.231.74, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSUwNNVXYbb0ii_rVoLF0wAAAIU"]
[Tue Nov 25 12:27:32.180448 2025] [:error] [pid 14078:tid 14142] [client 161.35.231.74:60300] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 13:42:13.600297 2025] [:error] [pid 14168:tid 14178] [client 196.119.218.6:55560] [client 196.119.218.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aSVBtfR-ZDU0QEgAIIsQKAAAAMc"]
[Tue Nov 25 15:54:23.293124 2025] [:error] [pid 2987:tid 2995] [client 54.173.250.15:40730] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aSVgr8-djEt-pTzPxnxnHQAAAUY"]
[Tue Nov 25 15:54:25.226977 2025] [:error] [pid 28739:tid 28769] [client 217.160.134.4:51490] [client 217.160.134.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.134.4, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSVgsRxGpKmlkG4FexRLmQAAAgc"]
[Tue Nov 25 15:54:25.232508 2025] [:error] [pid 28739:tid 28769] [client 217.160.134.4:51490] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 15:54:26.292258 2025] [:error] [pid 14168:tid 14193] [client 217.160.134.4:51496] [client 217.160.134.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.134.4, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSVgsvR-ZDU0QEgAIIs4mAAAANY"]
[Tue Nov 25 15:54:26.298964 2025] [:error] [pid 14168:tid 14193] [client 217.160.134.4:51496] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 19:30:21.809229 2025] [:error] [pid 14078:tid 14159] [client 137.184.56.145:50008] [client 137.184.56.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.56.145, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSWTTdVXYbb0ii_rVoJD2QAAAJY"]
[Tue Nov 25 19:30:21.812796 2025] [:error] [pid 14078:tid 14159] [client 137.184.56.145:50008] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 19:30:22.888029 2025] [:error] [pid 14168:tid 14176] [client 137.184.56.145:50012] [client 137.184.56.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.56.145, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSWTTvR-ZDU0QEgAIItluwAAAMU"]
[Tue Nov 25 19:30:22.895157 2025] [:error] [pid 14168:tid 14176] [client 137.184.56.145:50012] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 20:50:17.363267 2025] [:error] [pid 14077:tid 14114] [client 90.156.142.20:51646] [client 90.156.142.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.142.20, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSWmCRG9n7UHEkwDTyi6lAAAAEQ"]
[Tue Nov 25 20:50:17.367023 2025] [:error] [pid 14077:tid 14114] [client 90.156.142.20:51646] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 20:50:18.917564 2025] [:error] [pid 14078:tid 14151] [client 90.156.142.20:52046] [client 90.156.142.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.142.20, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSWmCtVXYbb0ii_rVoJgwAAAAI4"]
[Tue Nov 25 20:50:18.924137 2025] [:error] [pid 14078:tid 14151] [client 90.156.142.20:52046] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 21:13:02.748453 2025] [:error] [pid 14076:tid 14100] [client 20.251.207.231:6655] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSWrXnsB4Gz6Qw-pvBs1VwAAABM"]
[Tue Nov 25 21:13:03.337047 2025] [:error] [pid 14168:tid 14176] [client 20.251.207.231:6605] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSWrX_R-ZDU0QEgAIIuEMgAAAMU"]
[Tue Nov 25 21:13:03.883347 2025] [:error] [pid 14076:tid 14097] [client 20.251.207.231:6631] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSWrX3sB4Gz6Qw-pvBs1WgAAABA"]
[Tue Nov 25 21:13:04.429633 2025] [:error] [pid 14076:tid 14084] [client 20.251.207.231:6337] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSWrYHsB4Gz6Qw-pvBs1XAAAAAM"]
[Tue Nov 25 21:33:18.006075 2025] [:error] [pid 14078:tid 14144] [client 3.7.68.16:49728] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aSWwHtVXYbb0ii_rVoJ5IAAAAIc"]
[Tue Nov 25 21:33:18.633417 2025] [:error] [pid 14078:tid 14148] [client 3.7.68.16:49730] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.local"] [unique_id "aSWwHtVXYbb0ii_rVoJ5JQAAAIs"]
[Tue Nov 25 21:33:19.267449 2025] [:error] [pid 14168:tid 14178] [client 3.7.68.16:49746] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.dev"] [unique_id "aSWwH_R-ZDU0QEgAIIuJ_QAAAMc"]
[Tue Nov 25 21:33:19.902540 2025] [:error] [pid 43843:tid 43850] [client 3.7.68.16:58572] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.prod"] [unique_id "aSWwHxhx4v3NUNdMKDPy0QAAAcU"]
[Tue Nov 25 21:33:20.537986 2025] [:error] [pid 14076:tid 14088] [client 3.7.68.16:58582] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.staging"] [unique_id "aSWwIHsB4Gz6Qw-pvBs-BAAAAAc"]
[Tue Nov 25 21:33:21.174425 2025] [:error] [pid 14077:tid 14110] [client 3.7.68.16:58586] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.development"] [unique_id "aSWwIRG9n7UHEkwDTyjH7gAAAEA"]
[Tue Nov 25 21:33:21.810363 2025] [:error] [pid 14077:tid 14114] [client 3.7.68.16:58598] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.production"] [unique_id "aSWwIRG9n7UHEkwDTyjH8AAAAEQ"]
[Tue Nov 25 21:33:22.441469 2025] [:error] [pid 14076:tid 14082] [client 3.7.68.16:58610] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.test"] [unique_id "aSWwInsB4Gz6Qw-pvBs-BQAAAAE"]
[Tue Nov 25 21:33:23.082976 2025] [:error] [pid 14076:tid 14098] [client 3.7.68.16:58618] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.backup"] [unique_id "aSWwI3sB4Gz6Qw-pvBs-BwAAABE"]
[Tue Nov 25 21:33:23.714171 2025] [:error] [pid 14168:tid 14171] [client 3.7.68.16:58628] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env~"] [unique_id "aSWwI_R-ZDU0QEgAIIuKBgAAAMA"]
[Tue Nov 25 21:33:24.342530 2025] [:error] [pid 14078:tid 14161] [client 3.7.68.16:58632] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.sample"] [unique_id "aSWwJNVXYbb0ii_rVoJ5LgAAAJg"]
[Tue Nov 25 21:33:24.974364 2025] [:error] [pid 14078:tid 14155] [client 3.7.68.16:58636] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.old"] [unique_id "aSWwJNVXYbb0ii_rVoJ5MAAAAJI"]
[Tue Nov 25 21:33:25.606346 2025] [:error] [pid 14078:tid 14151] [client 3.7.68.16:58648] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.bak"] [unique_id "aSWwJdVXYbb0ii_rVoJ5MwAAAI4"]
[Tue Nov 25 21:33:26.241453 2025] [:error] [pid 28609:tid 28642] [client 3.7.68.16:58662] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.save"] [unique_id "aSWwJiGGdT-nZJVs3x3pigAAAZg"]
[Tue Nov 25 21:33:26.878731 2025] [:error] [pid 28609:tid 28620] [client 3.7.68.16:58676] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.orig"] [unique_id "aSWwJiGGdT-nZJVs3x3pjgAAAYI"]
[Tue Nov 25 21:33:27.506024 2025] [:error] [pid 14078:tid 14139] [client 3.7.68.16:58684] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.swp"] [unique_id "aSWwJ9VXYbb0ii_rVoJ5OAAAAII"]
[Tue Nov 25 21:33:28.142101 2025] [:error] [pid 14078:tid 14143] [client 3.7.68.16:58696] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.tmp"] [unique_id "aSWwKNVXYbb0ii_rVoJ5OQAAAIY"]
[Tue Nov 25 21:33:28.771345 2025] [:error] [pid 28739:tid 28782] [client 3.7.68.16:58702] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.dist"] [unique_id "aSWwKBxGpKmlkG4FexSlbgAAAhQ"]
[Tue Nov 25 21:33:29.400518 2025] [:error] [pid 43843:tid 43861] [client 3.7.68.16:58706] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/admin/.env"] [unique_id "aSWwKRhx4v3NUNdMKDPy2AAAAdA"]
[Tue Nov 25 21:33:30.035778 2025] [:error] [pid 43843:tid 43852] [client 3.7.68.16:54964] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/admin/.env.save"] [unique_id "aSWwKhhx4v3NUNdMKDPy2QAAAcc"]
[Tue Nov 25 21:33:30.673005 2025] [:error] [pid 2987:tid 2996] [client 3.7.68.16:54972] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/admin/.env.bak"] [unique_id "aSWwKs-djEt-pTzPxnzJDwAAAUc"]
[Tue Nov 25 21:33:31.299006 2025] [:error] [pid 14076:tid 14091] [client 3.7.68.16:54984] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/admin/.env.old"] [unique_id "aSWwK3sB4Gz6Qw-pvBs-IQAAAAo"]
[Tue Nov 25 21:33:31.933337 2025] [:error] [pid 14077:tid 14122] [client 3.7.68.16:55000] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/api/.env"] [unique_id "aSWwKxG9n7UHEkwDTyjH-QAAAEw"]
[Tue Nov 25 21:33:32.559650 2025] [:error] [pid 14078:tid 14145] [client 3.7.68.16:55006] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/api/.env.save"] [unique_id "aSWwLNVXYbb0ii_rVoJ5SwAAAIg"]
[Tue Nov 25 21:33:33.187771 2025] [:error] [pid 14078:tid 14143] [client 3.7.68.16:55014] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/api/.env.bak"] [unique_id "aSWwLdVXYbb0ii_rVoJ5WAAAAIY"]
[Tue Nov 25 21:33:33.817035 2025] [:error] [pid 43843:tid 43863] [client 3.7.68.16:55022] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/api/.env.old"] [unique_id "aSWwLRhx4v3NUNdMKDPy4QAAAdI"]
[Tue Nov 25 21:33:34.453291 2025] [:error] [pid 14077:tid 14129] [client 3.7.68.16:55028] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/app/.env"] [unique_id "aSWwLhG9n7UHEkwDTyjIAwAAAFM"]
[Tue Nov 25 21:33:35.080557 2025] [:error] [pid 14078:tid 14150] [client 3.7.68.16:55042] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/app/.env.save"] [unique_id "aSWwL9VXYbb0ii_rVoJ5awAAAI0"]
[Tue Nov 25 21:33:35.708305 2025] [:error] [pid 28739:tid 28771] [client 3.7.68.16:55048] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/app/.env.bak"] [unique_id "aSWwLxxGpKmlkG4FexSlfwAAAgk"]
[Tue Nov 25 21:33:36.338798 2025] [:error] [pid 28836:tid 29014] [client 3.7.68.16:55052] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/app/.env.old"] [unique_id "aSWwMJwNRsoxcLQGkTfmsAAAAtg"]
[Tue Nov 25 21:33:36.976421 2025] [:error] [pid 43981:tid 43986] [client 3.7.68.16:55058] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/config/.env"] [unique_id "aSWwMAgZn97m_qh_RaFkswAAAwM"]
[Tue Nov 25 21:33:37.615324 2025] [:error] [pid 28609:tid 28634] [client 3.7.68.16:55072] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/config/.env.save"] [unique_id "aSWwMSGGdT-nZJVs3x3poQAAAZA"]
[Tue Nov 25 21:33:38.246359 2025] [:error] [pid 2987:tid 2999] [client 3.7.68.16:55084] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/config/.env.bak"] [unique_id "aSWwMs-djEt-pTzPxnzJGgAAAUo"]
[Tue Nov 25 21:33:38.887878 2025] [:error] [pid 14076:tid 14091] [client 3.7.68.16:55086] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/config/.env.old"] [unique_id "aSWwMnsB4Gz6Qw-pvBs-MgAAAAo"]
[Tue Nov 25 21:33:39.516834 2025] [:error] [pid 43981:tid 43993] [client 3.7.68.16:55102] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/src/.env"] [unique_id "aSWwMwgZn97m_qh_RaFktQAAAwo"]
[Tue Nov 25 21:33:40.143564 2025] [:error] [pid 14076:tid 14097] [client 3.7.68.16:37820] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/src/.env.save"] [unique_id "aSWwNHsB4Gz6Qw-pvBs-OgAAABA"]
[Tue Nov 25 21:33:40.775789 2025] [:error] [pid 28739:tid 28769] [client 3.7.68.16:37828] [client 3.7.68.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/src/.env.bak"] [unique_id "aSWwNBxGpKmlkG4FexSlgAAAAgc"]
[Tue Nov 25 21:41:57.015734 2025] [:error] [pid 14168:tid 14178] [client 98.89.29.83:54720] [client 98.89.29.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aSWyJfR-ZDU0QEgAIIuMeQAAAMc"]
[Tue Nov 25 22:15:19.253825 2025] [:error] [pid 28836:tid 28968] [client 20.71.3.246:16049] [client 20.71.3.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.71.3.246, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSW595wNRsoxcLQGkTf07QAAAs0"]
[Tue Nov 25 22:15:19.257720 2025] [:error] [pid 28836:tid 28968] [client 20.71.3.246:16049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 22:15:22.940601 2025] [:error] [pid 43843:tid 43853] [client 20.71.3.246:10691] [client 20.71.3.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.71.3.246, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSW5-hhx4v3NUNdMKDP_JAAAAcg"]
[Tue Nov 25 22:15:22.946746 2025] [:error] [pid 43843:tid 43853] [client 20.71.3.246:10691] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 22:34:14.975329 2025] [:error] [pid 28739:tid 28784] [client 43.153.135.208:41166] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aSW-ZhxGpKmlkG4FexTBAwAAAhY"]
[Tue Nov 25 23:57:44.372918 2025] [:error] [pid 14078:tid 14141] [client 194.233.69.121:54222] [client 194.233.69.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.233.69.121, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSXR-NVXYbb0ii_rVoK_-wAAAIQ"]
[Tue Nov 25 23:57:44.377639 2025] [:error] [pid 14078:tid 14141] [client 194.233.69.121:54222] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 23:57:44.880418 2025] [:error] [pid 14078:tid 14156] [client 194.233.69.121:54226] [client 194.233.69.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.233.69.121, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSXR-NVXYbb0ii_rVoK__gAAAJM"]
[Tue Nov 25 23:57:44.887054 2025] [:error] [pid 14078:tid 14156] [client 194.233.69.121:54226] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 01:47:33.480627 2025] [:error] [pid 2987:tid 3010] [client 54.173.250.15:33040] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aSXrtc-djEt-pTzPxnwJ5AAAAVU"]
[Wed Nov 26 01:56:22.700317 2025] [:error] [pid 14078:tid 14139] [client 198.244.243.199:47866] [client 198.244.243.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.244.243.199, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSXtxtVXYbb0ii_rVoL0GQAAAII"]
[Wed Nov 26 01:56:22.703870 2025] [:error] [pid 14078:tid 14139] [client 198.244.243.199:47866] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 01:56:23.693773 2025] [:error] [pid 28836:tid 28966] [client 198.244.243.199:47876] [client 198.244.243.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.244.243.199, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSXtx5wNRsoxcLQGkTcn6wAAAss"]
[Wed Nov 26 01:56:23.701693 2025] [:error] [pid 28836:tid 28966] [client 198.244.243.199:47876] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 02:10:31.044559 2025] [:error] [pid 14078:tid 14140] [client 104.207.38.204:56191] [client 104.207.38.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/HEAD"] [unique_id "aSXxF9VXYbb0ii_rVoL4fwAAAIM"]
[Wed Nov 26 02:10:33.213309 2025] [:error] [pid 14078:tid 14138] [client 104.167.25.13:11667] [client 104.167.25.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aSXxGdVXYbb0ii_rVoL4gwAAAIE"]
[Wed Nov 26 02:10:36.114811 2025] [:error] [pid 14078:tid 14158] [client 65.111.23.159:17139] [client 65.111.23.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.svn/wc.db"] [unique_id "aSXxHNVXYbb0ii_rVoL4iAAAAJU"]
[Wed Nov 26 02:14:18.399738 2025] [:error] [pid 14168:tid 14176] [client 106.212.241.80:64446] [client 106.212.241.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.212.241.80, incrementing ddos counter"] [hostname "jandakotpilotshop.com"] [uri "/xmlrpc.php"] [unique_id "aSXx-vR-ZDU0QEgAIIvKtAAAAMU"]
[Wed Nov 26 02:14:18.404665 2025] [:error] [pid 14168:tid 14176] [client 106.212.241.80:64446] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 26 02:19:58.302927 2025] [:error] [pid 43981:tid 44002] [client 203.33.203.148:59104] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aSXzTggZn97m_qh_RaGk6gAAAxM"]
[Wed Nov 26 03:37:45.125665 2025] [:error] [pid 23968:tid 24001] [client 68.183.90.36:55003] [client 68.183.90.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/"] [unique_id "aSYFic4ofN5EjQSFyQcUGwAAAA0"], referer: binance.com
[Wed Nov 26 03:37:50.821083 2025] [:error] [pid 23968:tid 24001] [client 68.183.90.36:53090] [client 68.183.90.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/files/"] [unique_id "aSYFjs4ofN5EjQSFyQcUKQAAAA0"], referer: binance.com
[Wed Nov 26 05:53:11.944785 2025] [:error] [pid 3193:tid 3203] [client 159.223.77.197:40616] [client 159.223.77.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.77.197, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSYlR3uQoDIKTNoWPJU9ogAAA8g"]
[Wed Nov 26 05:53:11.950276 2025] [:error] [pid 3193:tid 3203] [client 159.223.77.197:40616] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 05:53:12.307163 2025] [:error] [pid 3011:tid 3050] [client 159.223.77.197:40628] [client 159.223.77.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.77.197, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSYlSEb0BA3GljiGlI7HsAAAAEg"]
[Wed Nov 26 05:53:12.317570 2025] [:error] [pid 3011:tid 3050] [client 159.223.77.197:40628] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 06:44:53.404935 2025] [:error] [pid 717:tid 770] [client 185.30.32.93:35424] [client 185.30.32.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.93, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSYxZXaTjghKhdJnwAvxtAAAAlY"]
[Wed Nov 26 06:44:53.409433 2025] [:error] [pid 717:tid 770] [client 185.30.32.93:35424] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 06:44:54.431918 2025] [:error] [pid 3493:tid 3506] [client 185.30.32.93:35436] [client 185.30.32.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.93, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSYxZmBUa93ugXko11OGUQAAAQs"]
[Wed Nov 26 06:44:54.442148 2025] [:error] [pid 3493:tid 3506] [client 185.30.32.93:35436] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 08:50:09.683353 2025] [:error] [pid 35540:tid 35561] [client 62.60.201.30:40854] [client 62.60.201.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.201.30, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSZOwcGrIq2A6SZSnkIRoQAAAI8"]
[Wed Nov 26 08:50:09.688868 2025] [:error] [pid 35540:tid 35561] [client 62.60.201.30:40854] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 08:50:10.707980 2025] [:error] [pid 34830:tid 34841] [client 62.60.201.30:40856] [client 62.60.201.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.201.30, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSZOwkukvkWgWN6jCR1ocgAAAAk"]
[Wed Nov 26 08:50:10.714526 2025] [:error] [pid 34830:tid 34841] [client 62.60.201.30:40856] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 09:39:41.940254 2025] [:error] [pid 35540:tid 35560] [client 145.239.10.137:34531] File does not exist: /usr/local/apache/htdocs/suspended-page/connects.php, referer: http://jandakotpilotshop.com/connects.php
[Wed Nov 26 11:42:53.084970 2025] [:error] [pid 34830:tid 34851] [client 14.225.211.166:39656] [client 14.225.211.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.211.166, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSZ3PUukvkWgWN6jCR2RfQAAABM"]
[Wed Nov 26 11:42:53.090283 2025] [:error] [pid 34830:tid 34851] [client 14.225.211.166:39656] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 11:42:54.276264 2025] [:error] [pid 45836:tid 45868] [client 14.225.211.166:39668] [client 14.225.211.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.211.166, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSZ3PpfrnOGqL-seZAwkXgAAANY"]
[Wed Nov 26 11:42:54.283018 2025] [:error] [pid 45836:tid 45868] [client 14.225.211.166:39668] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 17:36:14.527976 2025] [:error] [pid 6471:tid 6484] [client 43.231.0.82:56864] [client 43.231.0.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.231.0.82, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSbKDuh3Z9TZLlRuTiNxugAAAIo"]
[Wed Nov 26 17:36:14.531943 2025] [:error] [pid 6471:tid 6484] [client 43.231.0.82:56864] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 17:36:15.535963 2025] [:error] [pid 45683:tid 45702] [client 43.231.0.82:56888] [client 43.231.0.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.231.0.82, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSbKDxX1gQgNFW_222qRdQAAAU4"]
[Wed Nov 26 17:36:15.542142 2025] [:error] [pid 45683:tid 45702] [client 43.231.0.82:56888] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 18:18:20.504986 2025] [:error] [pid 45685:tid 45762] [client 196.74.222.255:1575] [client 196.74.222.255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aSbT7Fj3f_NRdgU0DQ7KWgAAARQ"]
[Wed Nov 26 20:00:09.709172 2025] [:error] [pid 45684:tid 45735] [client 216.126.239.203:48258] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aSbryfg5LMxwI4-PD1daVwAAABQ"]
[Wed Nov 26 20:23:03.043055 2025] [:error] [pid 6471:tid 6491] [client 43.130.228.73:52812] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aSbxJ-h3Z9TZLlRuTiOecgAAAJE"]
[Wed Nov 26 22:01:36.601590 2025] [:error] [pid 20733:tid 20755] [client 104.255.170.81:38380] [client 104.255.170.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.255.170.81, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aScIQAV9EP2HuRvnH8d4dQAAANQ"]
[Wed Nov 26 22:01:36.605357 2025] [:error] [pid 20733:tid 20755] [client 104.255.170.81:38380] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 22:01:38.850718 2025] [:error] [pid 45769:tid 45782] [client 104.255.170.81:38386] [client 104.255.170.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.255.170.81, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aScIQldG5Eht9c3yy4NFBAAAAco"]
[Wed Nov 26 22:01:38.858103 2025] [:error] [pid 45769:tid 45782] [client 104.255.170.81:38386] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 22:23:29.923696 2025] [:error] [pid 45769:tid 45779] [client 194.233.69.121:41958] [client 194.233.69.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.233.69.121, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aScNYVdG5Eht9c3yy4NJIQAAAcc"]
[Wed Nov 26 22:23:29.927472 2025] [:error] [pid 45769:tid 45779] [client 194.233.69.121:41958] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 22:23:30.789407 2025] [:error] [pid 6471:tid 6496] [client 194.233.69.121:17626] [client 194.233.69.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.233.69.121, incrementing brute counter"] [hostname "www.jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aScNYuh3Z9TZLlRuTiO9RwAAAJY"]
[Wed Nov 26 22:23:30.796168 2025] [:error] [pid 6471:tid 6496] [client 194.233.69.121:17626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 22:36:36.801270 2025] [:error] [pid 45683:tid 45700] [client 44.246.251.254:39414] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.git/config"] [unique_id "aScQdBX1gQgNFW_222rWbQAAAUw"]
[Wed Nov 26 22:36:37.544950 2025] [:error] [pid 45683:tid 45694] [client 44.246.251.254:39418] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env"] [unique_id "aScQdRX1gQgNFW_222rWbgAAAUY"]
[Wed Nov 26 22:36:38.294861 2025] [:error] [pid 45684:tid 45725] [client 44.246.251.254:39428] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.local"] [unique_id "aScQdvg5LMxwI4-PD1eeEQAAAAo"]
[Wed Nov 26 22:36:39.036584 2025] [:error] [pid 45684:tid 45716] [client 44.246.251.254:52914] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.dev"] [unique_id "aScQd_g5LMxwI4-PD1eeFgAAAAE"]
[Wed Nov 26 22:36:39.760656 2025] [:error] [pid 45684:tid 45734] [client 44.246.251.254:52924] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.prod"] [unique_id "aScQd_g5LMxwI4-PD1eeGgAAABM"]
[Wed Nov 26 22:36:40.487575 2025] [:error] [pid 6471:tid 6489] [client 44.246.251.254:52930] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.staging"] [unique_id "aScQeOh3Z9TZLlRuTiPA5QAAAI8"]
[Wed Nov 26 22:36:41.236652 2025] [:error] [pid 6471:tid 6486] [client 44.246.251.254:52946] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.development"] [unique_id "aScQeeh3Z9TZLlRuTiPA6QAAAIw"]
[Wed Nov 26 22:36:41.973601 2025] [:error] [pid 45769:tid 45775] [client 44.246.251.254:52956] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.production"] [unique_id "aScQeVdG5Eht9c3yy4NL9QAAAcM"]
[Wed Nov 26 22:36:42.706352 2025] [:error] [pid 45684:tid 45719] [client 44.246.251.254:52964] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.test"] [unique_id "aScQevg5LMxwI4-PD1eeKQAAAAQ"]
[Wed Nov 26 22:36:43.452561 2025] [:error] [pid 45684:tid 45715] [client 44.246.251.254:52974] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.backup"] [unique_id "aScQe_g5LMxwI4-PD1eeKwAAAAA"]
[Wed Nov 26 22:36:44.199035 2025] [:error] [pid 45684:tid 45733] [client 44.246.251.254:52978] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env~"] [unique_id "aScQfPg5LMxwI4-PD1eeLgAAABI"]
[Wed Nov 26 22:36:44.934232 2025] [:error] [pid 45684:tid 45718] [client 44.246.251.254:52982] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.sample"] [unique_id "aScQfPg5LMxwI4-PD1eeMwAAAAM"]
[Wed Nov 26 22:36:45.683388 2025] [:error] [pid 45684:tid 45731] [client 44.246.251.254:52998] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.old"] [unique_id "aScQffg5LMxwI4-PD1eeNgAAABA"]
[Wed Nov 26 22:36:46.418238 2025] [:error] [pid 45684:tid 45738] [client 44.246.251.254:53004] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.bak"] [unique_id "aScQfvg5LMxwI4-PD1eeOAAAABc"]
[Wed Nov 26 22:36:47.150959 2025] [:error] [pid 20733:tid 20757] [client 44.246.251.254:53008] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.save"] [unique_id "aScQfwV9EP2HuRvnH8d_3wAAANY"]
[Wed Nov 26 22:36:47.894682 2025] [:error] [pid 45684:tid 45721] [client 44.246.251.254:53018] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.orig"] [unique_id "aScQf_g5LMxwI4-PD1eeTgAAAAY"]
[Wed Nov 26 22:36:48.623005 2025] [:error] [pid 20733:tid 20742] [client 44.246.251.254:42364] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.swp"] [unique_id "aScQgAV9EP2HuRvnH8d_5AAAAMc"]
[Wed Nov 26 22:36:49.352768 2025] [:error] [pid 20733:tid 20751] [client 44.246.251.254:42370] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.tmp"] [unique_id "aScQgQV9EP2HuRvnH8d_7QAAANA"]
[Wed Nov 26 22:36:50.113505 2025] [:error] [pid 45685:tid 45750] [client 44.246.251.254:42382] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/.env.dist"] [unique_id "aScQglj3f_NRdgU0DQ4CNgAAAQg"]
[Wed Nov 26 22:36:50.840443 2025] [:error] [pid 45769:tid 45781] [client 44.246.251.254:42390] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/admin/.env"] [unique_id "aScQgldG5Eht9c3yy4NMAQAAAck"]
[Wed Nov 26 22:36:51.571734 2025] [:error] [pid 45685:tid 45756] [client 44.246.251.254:42398] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/admin/.env.save"] [unique_id "aScQg1j3f_NRdgU0DQ4COAAAAQ4"]
[Wed Nov 26 22:36:52.333231 2025] [:error] [pid 45769:tid 45787] [client 44.246.251.254:42404] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/admin/.env.bak"] [unique_id "aScQhFdG5Eht9c3yy4NMBQAAAc8"]
[Wed Nov 26 22:36:53.065191 2025] [:error] [pid 46443:tid 46449] [client 44.246.251.254:42410] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/admin/.env.old"] [unique_id "aScQhcLmDsnHrj-QFB8fmwAAAEQ"]
[Wed Nov 26 22:36:53.792914 2025] [:error] [pid 45683:tid 45690] [client 44.246.251.254:42416] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/api/.env"] [unique_id "aScQhRX1gQgNFW_222rWggAAAUI"]
[Wed Nov 26 22:36:54.524221 2025] [:error] [pid 6471:tid 6496] [client 44.246.251.254:42422] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/api/.env.save"] [unique_id "aScQhuh3Z9TZLlRuTiPBAwAAAJY"]
[Wed Nov 26 22:36:55.271472 2025] [:error] [pid 45684:tid 45731] [client 44.246.251.254:42428] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/api/.env.bak"] [unique_id "aScQh_g5LMxwI4-PD1eehgAAABA"]
[Wed Nov 26 22:36:55.995313 2025] [:error] [pid 45683:tid 45708] [client 44.246.251.254:42432] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/api/.env.old"] [unique_id "aScQhxX1gQgNFW_222rWgwAAAVQ"]
[Wed Nov 26 22:36:56.726190 2025] [:error] [pid 46443:tid 46459] [client 44.246.251.254:42446] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/app/.env"] [unique_id "aScQiMLmDsnHrj-QFB8fpAAAAE4"]
[Wed Nov 26 22:36:57.479091 2025] [:error] [pid 46443:tid 46451] [client 44.246.251.254:42454] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/app/.env.save"] [unique_id "aScQicLmDsnHrj-QFB8fpwAAAEY"]
[Wed Nov 26 22:36:58.222814 2025] [:error] [pid 45684:tid 45720] [client 44.246.251.254:42458] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/app/.env.bak"] [unique_id "aScQivg5LMxwI4-PD1eeigAAAAU"]
[Wed Nov 26 22:36:58.968965 2025] [:error] [pid 46443:tid 46450] [client 44.246.251.254:38148] [client 44.246.251.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/app/.env.old"] [unique_id "aScQisLmDsnHrj-QFB8frQAAAEU"]
[Thu Nov 27 00:52:01.322297 2025] [:error] [pid 54723:tid 54752] [client 103.77.107.57:58497] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jandakotpilotshop.com"] [uri "/sftp-config.json"] [unique_id "aScwMQ2CEg7QoyDosdLyVwAAABY"]
[Thu Nov 27 02:49:09.752857 2025] [:error] [pid 24826:tid 25138] [client 68.183.90.36:62433] [client 68.183.90.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/uploads/"] [unique_id "aSdLpVEvPXLVl-nh-yL0mQAAARY"], referer: binance.com
[Thu Nov 27 02:49:15.963726 2025] [:error] [pid 25180:tid 25193] [client 68.183.90.36:49892] [client 68.183.90.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/images/"] [unique_id "aSdLq7-owhtiwMHXYlzo9wAAAYs"], referer: binance.com
[Thu Nov 27 02:49:21.048215 2025] [:error] [pid 25262:tid 25324] [client 68.183.90.36:53490] [client 68.183.90.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "jandakotpilotshop.com"] [uri "/files/"] [unique_id "aSdLsU3p81VU3bYILBVWswAAAgM"], referer: binance.com
[Thu Nov 27 04:05:13.644267 2025] [:error] [pid 6203:tid 6279] [client 203.33.203.148:54124] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jandakotpilotshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aSddecbdRL7aKyrgqyy33AAAAJM"]
[Thu Nov 27 05:13:46.313809 2025] [:error] [pid 6202:tid 6245] [client 185.236.232.248:35518] [client 185.236.232.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.236.232.248, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSdtitJa7NTP0XPyZ6lsNAAAAEw"]
[Thu Nov 27 05:13:46.320828 2025] [:error] [pid 6202:tid 6245] [client 185.236.232.248:35518] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 27 05:13:53.103237 2025] [:error] [pid 6203:tid 6262] [client 89.185.84.185:51618] [client 89.185.84.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.185.84.185, incrementing brute counter"] [hostname "jandakotpilotshop.com"] [uri "/wp-login.php"] [unique_id "aSdtkcbdRL7aKyrgqyzNTwAAAII"]
[Thu Nov 27 05:13:53.109602 2025] [:error] [pid 6203:tid 6262] [client 89.185.84.185:51618] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Jan 29 16:41:50.036131 2026] [:error] [pid 19070:tid 19121] [client 37.19.197.193:42488] [client 37.19.197.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.jandakotpilotshop.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jandakotpilotshop.com"] [uri "/robots.txt"] [unique_id "aXsdTrou83lIon_aKga10QAAAE8"]
[Thu Jan 29 16:41:52.114731 2026] [:error] [pid 20486:tid 20510] [client 37.19.197.193:1224] [client 37.19.197.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.jandakotpilotshop.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aXsdUHgqSZb6GBx5nnPBFQAAARU"]
[Thu Jan 29 16:41:53.469112 2026] [:error] [pid 20486:tid 20509] [client 37.19.197.193:9105] [client 37.19.197.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.jandakotpilotshop.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jandakotpilotshop.com"] [uri "/robots.txt"] [unique_id "aXsdUXgqSZb6GBx5nnPBGgAAARQ"]
[Thu Jan 29 16:41:55.735405 2026] [:error] [pid 20580:tid 20686] [client 37.19.197.193:18736] [client 37.19.197.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.jandakotpilotshop.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aXsdU5CZ5HHdXPmeL5_u2QAAApI"]
[Thu Jan 29 16:41:58.542002 2026] [:error] [pid 19069:tid 19099] [client 37.19.197.193:62470] [client 37.19.197.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.jandakotpilotshop.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aXsdVvDHsRM4BJ9a4QsMXAAAABU"]
[Thu Jan 29 16:41:58.773328 2026] [:error] [pid 20580:tid 20683] [client 37.19.197.193:18736] [client 37.19.197.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.jandakotpilotshop.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aXsdVpCZ5HHdXPmeL5_u3wAAAo8"]
[Thu Jan 29 16:42:00.144273 2026] [:error] [pid 20580:tid 20672] [client 37.19.197.193:18736] [client 37.19.197.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.jandakotpilotshop.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aXsdWJCZ5HHdXPmeL5_u4wAAAoQ"]
[Thu Jan 29 16:42:01.744150 2026] [:error] [pid 20519:tid 20565] [client 37.19.197.193:3380] [client 37.19.197.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.jandakotpilotshop.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aXsdWQo4s4fyROrkyRm3wAAAAZE"]
[Thu Jan 29 16:42:02.446796 2026] [:error] [pid 19069:tid 19078] [client 37.19.197.193:24854] [client 37.19.197.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.jandakotpilotshop.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jandakotpilotshop.com"] [uri "/"] [unique_id "aXsdWvDHsRM4BJ9a4QsMZwAAAAA"]
[Thu Apr 16 01:43:30.343845 2026] [ssl:warn] [pid 4016:tid 4016] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 01:43:30.343872 2026] [ssl:warn] [pid 4016:tid 4016] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:29:40.917265 2026] [ssl:warn] [pid 52554:tid 52554] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:29:40.917294 2026] [ssl:warn] [pid 52554:tid 52554] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:29:42.889648 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:29:42.889675 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:07.950029 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:07.950073 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:23.061778 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:23.061809 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:30.026148 2026] [ssl:warn] [pid 53231:tid 53231] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:30.026174 2026] [ssl:warn] [pid 53231:tid 53231] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:32.095898 2026] [ssl:warn] [pid 53237:tid 53237] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:32.095924 2026] [ssl:warn] [pid 53237:tid 53237] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:41:22.724089 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:41:22.724115 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:41:24.722036 2026] [ssl:warn] [pid 26973:tid 26973] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:41:24.722061 2026] [ssl:warn] [pid 26973:tid 26973] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:47:58.851529 2026] [ssl:warn] [pid 57468:tid 57468] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:47:58.851555 2026] [ssl:warn] [pid 57468:tid 57468] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:48:00.915058 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:48:00.915083 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 00:03:16.983094 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 00:03:16.983123 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:41.152591 2026] [ssl:warn] [pid 5220:tid 5220] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:41.152632 2026] [ssl:warn] [pid 5220:tid 5220] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:43.207845 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:43.207870 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:53.414534 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:53.414559 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:02.290792 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:02.290818 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:13.115801 2026] [ssl:warn] [pid 5809:tid 5809] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:13.115827 2026] [ssl:warn] [pid 5809:tid 5809] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:15.120349 2026] [ssl:warn] [pid 5815:tid 5815] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:15.120376 2026] [ssl:warn] [pid 5815:tid 5815] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:46.001515 2026] [ssl:warn] [pid 43721:tid 43721] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:46.001543 2026] [ssl:warn] [pid 43721:tid 43721] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:48.014526 2026] [ssl:warn] [pid 43725:tid 43725] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:48.014553 2026] [ssl:warn] [pid 43725:tid 43725] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:46.718088 2026] [ssl:warn] [pid 9098:tid 9098] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:46.718114 2026] [ssl:warn] [pid 9098:tid 9098] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:48.782889 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:48.782914 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 00:02:18.389539 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 00:02:18.389566 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:41.605749 2026] [ssl:warn] [pid 6452:tid 6452] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:41.605776 2026] [ssl:warn] [pid 6452:tid 6452] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:43.622992 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:43.623018 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:56.026056 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:56.026081 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:04.968269 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:04.968309 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:13.764671 2026] [ssl:warn] [pid 7034:tid 7034] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:13.764696 2026] [ssl:warn] [pid 7034:tid 7034] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:15.773848 2026] [ssl:warn] [pid 7037:tid 7037] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:15.773874 2026] [ssl:warn] [pid 7037:tid 7037] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:31.706071 2026] [ssl:warn] [pid 44741:tid 44741] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:31.706096 2026] [ssl:warn] [pid 44741:tid 44741] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:33.711386 2026] [ssl:warn] [pid 44746:tid 44746] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:33.711413 2026] [ssl:warn] [pid 44746:tid 44746] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:55.943143 2026] [ssl:warn] [pid 9807:tid 9807] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:55.943171 2026] [ssl:warn] [pid 9807:tid 9807] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:57.974880 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:57.974906 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 00:02:31.515758 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 00:02:31.515784 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:50.063170 2026] [ssl:warn] [pid 39407:tid 39407] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:50.063196 2026] [ssl:warn] [pid 39407:tid 39407] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:52.156006 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:52.156035 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:07.615077 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:07.615102 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:17.533519 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:17.533544 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:28.385713 2026] [ssl:warn] [pid 40069:tid 40069] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:28.385755 2026] [ssl:warn] [pid 40069:tid 40069] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:30.453466 2026] [ssl:warn] [pid 40072:tid 40072] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:30.453492 2026] [ssl:warn] [pid 40072:tid 40072] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:07.863854 2026] [ssl:warn] [pid 17392:tid 17392] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:07.863880 2026] [ssl:warn] [pid 17392:tid 17392] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:09.909834 2026] [ssl:warn] [pid 17394:tid 17394] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:09.909859 2026] [ssl:warn] [pid 17394:tid 17394] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:44.970158 2026] [ssl:warn] [pid 47724:tid 47724] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:44.970185 2026] [ssl:warn] [pid 47724:tid 47724] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:47.018814 2026] [ssl:warn] [pid 47728:tid 47728] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:47.018839 2026] [ssl:warn] [pid 47728:tid 47728] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:52.162728 2026] [ssl:warn] [pid 61391:tid 61391] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:52.162756 2026] [ssl:warn] [pid 61391:tid 61391] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:54.420918 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:54.420918 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:11.177457 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:11.177467 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:20.572772 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:20.572800 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:29.462009 2026] [ssl:warn] [pid 62018:tid 62018] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:29.462034 2026] [ssl:warn] [pid 62018:tid 62018] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:31.454045 2026] [ssl:warn] [pid 62020:tid 62020] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:31.454073 2026] [ssl:warn] [pid 62020:tid 62020] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:14.047828 2026] [ssl:warn] [pid 34210:tid 34210] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:14.047860 2026] [ssl:warn] [pid 34210:tid 34210] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:16.074572 2026] [ssl:warn] [pid 34213:tid 34213] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:16.074597 2026] [ssl:warn] [pid 34213:tid 34213] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:48.583828 2026] [ssl:warn] [pid 64283:tid 64283] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:48.583855 2026] [ssl:warn] [pid 64283:tid 64283] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:50.642964 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:50.642997 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 10:09:52.442742 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 10:09:52.442771 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:53.386978 2026] [ssl:warn] [pid 31929:tid 31929] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:53.387004 2026] [ssl:warn] [pid 31929:tid 31929] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:55.695725 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:55.695751 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:10.878039 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:10.878063 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:20.770105 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:20.770142 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:26.718338 2026] [ssl:warn] [pid 32501:tid 32501] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:26.718364 2026] [ssl:warn] [pid 32501:tid 32501] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:28.797994 2026] [ssl:warn] [pid 32504:tid 32504] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:28.798021 2026] [ssl:warn] [pid 32504:tid 32504] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:47.020057 2026] [ssl:warn] [pid 4901:tid 4901] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:47.020097 2026] [ssl:warn] [pid 4901:tid 4901] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:49.079035 2026] [ssl:warn] [pid 4903:tid 4903] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:49.079061 2026] [ssl:warn] [pid 4903:tid 4903] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:05.442423 2026] [ssl:warn] [pid 35237:tid 35237] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:05.442448 2026] [ssl:warn] [pid 35237:tid 35237] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:07.577101 2026] [ssl:warn] [pid 35263:tid 35263] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:07.577128 2026] [ssl:warn] [pid 35263:tid 35263] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:45.614296 2026] [ssl:warn] [pid 17978:tid 17978] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:45.614325 2026] [ssl:warn] [pid 17978:tid 17978] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:47.912990 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:47.913014 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:03.166291 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:03.166319 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:12.707223 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:12.707297 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:19.616185 2026] [ssl:warn] [pid 18567:tid 18567] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:19.616257 2026] [ssl:warn] [pid 18567:tid 18567] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:21.717871 2026] [ssl:warn] [pid 18569:tid 18569] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:21.717909 2026] [ssl:warn] [pid 18569:tid 18569] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:31.056005 2026] [ssl:warn] [pid 56393:tid 56393] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:31.056030 2026] [ssl:warn] [pid 56393:tid 56393] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:33.144053 2026] [ssl:warn] [pid 56397:tid 56397] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:33.144078 2026] [ssl:warn] [pid 56397:tid 56397] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:03.239572 2026] [ssl:warn] [pid 21632:tid 21632] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:03.239600 2026] [ssl:warn] [pid 21632:tid 21632] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:05.326371 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:05.326400 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 13:25:48.976150 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 13:25:48.976190 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:44.441838 2026] [ssl:warn] [pid 39499:tid 39499] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:44.441865 2026] [ssl:warn] [pid 39499:tid 39499] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:46.634380 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:46.634405 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:03.993816 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:03.993843 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:13.291360 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:13.291387 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:27.309699 2026] [ssl:warn] [pid 40150:tid 40150] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:27.309725 2026] [ssl:warn] [pid 40150:tid 40150] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:29.355612 2026] [ssl:warn] [pid 40153:tid 40153] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:29.355638 2026] [ssl:warn] [pid 40153:tid 40153] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:41.780899 2026] [ssl:warn] [pid 12710:tid 12710] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:41.780939 2026] [ssl:warn] [pid 12710:tid 12710] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:43.801521 2026] [ssl:warn] [pid 12712:tid 12712] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:43.801546 2026] [ssl:warn] [pid 12712:tid 12712] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:19.642490 2026] [ssl:warn] [pid 42921:tid 42921] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:19.642517 2026] [ssl:warn] [pid 42921:tid 42921] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:21.617329 2026] [ssl:warn] [pid 42923:tid 42923] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:21.617365 2026] [ssl:warn] [pid 42923:tid 42923] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:45.197005 2026] [ssl:warn] [pid 14987:tid 14987] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:45.197031 2026] [ssl:warn] [pid 14987:tid 14987] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:47.522558 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:47.522598 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:59.598692 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:59.598717 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:09.361596 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:09.361623 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:15.350467 2026] [ssl:warn] [pid 15609:tid 15609] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:15.350495 2026] [ssl:warn] [pid 15609:tid 15609] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:17.424202 2026] [ssl:warn] [pid 15624:tid 15624] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:17.424243 2026] [ssl:warn] [pid 15624:tid 15624] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:36.752024 2026] [ssl:warn] [pid 53619:tid 53619] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:36.752052 2026] [ssl:warn] [pid 53619:tid 53619] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:38.850209 2026] [ssl:warn] [pid 53622:tid 53622] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:38.850264 2026] [ssl:warn] [pid 53622:tid 53622] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:34.080003 2026] [ssl:warn] [pid 19045:tid 19045] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:34.080029 2026] [ssl:warn] [pid 19045:tid 19045] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:36.173990 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:36.174016 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:09.813825 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:09.813867 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:39.132823 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:39.132848 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:14:56.923385 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:14:56.923413 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:03.773639 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:03.773669 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:15.113963 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:15.113963 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:40.959645 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:40.959674 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:16:05.389097 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:16:05.389123 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 00:01:49.039629 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 00:01:49.039655 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:25:48.319133 2026] [ssl:warn] [pid 40059:tid 40059] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:48.319133 2026] [ssl:warn] [pid 40059:tid 40059] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:25:50.449162 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:50.449187 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:05.666785 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:05.666811 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:14.975572 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:14.975597 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:28.830927 2026] [ssl:warn] [pid 40674:tid 40674] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:28.830955 2026] [ssl:warn] [pid 40674:tid 40674] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:30.829883 2026] [ssl:warn] [pid 40686:tid 40686] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:30.829907 2026] [ssl:warn] [pid 40686:tid 40686] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:02.028994 2026] [ssl:warn] [pid 13515:tid 13515] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:02.029020 2026] [ssl:warn] [pid 13515:tid 13515] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:04.126173 2026] [ssl:warn] [pid 13525:tid 13525] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:04.126198 2026] [ssl:warn] [pid 13525:tid 13525] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:47.021380 2026] [ssl:warn] [pid 44265:tid 44265] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:47.021406 2026] [ssl:warn] [pid 44265:tid 44265] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:49.114766 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:49.114808 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 17:02:14.192160 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 17:02:14.192185 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 18:02:17.684089 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 18:02:17.684117 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:11.655444 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:11.655487 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:34.792443 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:34.792455 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:45.319493 2026] [ssl:warn] [pid 63345:tid 63345] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:45.319519 2026] [ssl:warn] [pid 63345:tid 63345] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:47.478539 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:47.478580 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:01.306534 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:01.306549 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:11.140417 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:11.140443 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:17.968649 2026] [ssl:warn] [pid 64047:tid 64047] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:17.968675 2026] [ssl:warn] [pid 64047:tid 64047] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:20.001328 2026] [ssl:warn] [pid 64050:tid 64050] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:20.001356 2026] [ssl:warn] [pid 64050:tid 64050] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:37.814967 2026] [ssl:warn] [pid 42994:tid 42994] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:37.815047 2026] [ssl:warn] [pid 42994:tid 42994] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:40.234446 2026] [ssl:warn] [pid 43001:tid 43001] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:40.234472 2026] [ssl:warn] [pid 43001:tid 43001] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:16.867445 2026] [ssl:warn] [pid 8334:tid 8334] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:16.867472 2026] [ssl:warn] [pid 8334:tid 8334] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:18.854142 2026] [ssl:warn] [pid 8338:tid 8338] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:18.854168 2026] [ssl:warn] [pid 8338:tid 8338] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:43.299177 2026] [ssl:warn] [pid 19503:tid 19503] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:43.299205 2026] [ssl:warn] [pid 19503:tid 19503] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:45.488057 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:45.488082 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:00.783744 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:00.783769 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:09.455146 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:09.455185 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:16.216505 2026] [ssl:warn] [pid 20092:tid 20092] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:16.216533 2026] [ssl:warn] [pid 20092:tid 20092] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:18.222601 2026] [ssl:warn] [pid 20096:tid 20096] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:18.222627 2026] [ssl:warn] [pid 20096:tid 20096] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:43.782838 2026] [ssl:warn] [pid 57619:tid 57619] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:43.782866 2026] [ssl:warn] [pid 57619:tid 57619] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:45.823684 2026] [ssl:warn] [pid 57624:tid 57624] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:45.823709 2026] [ssl:warn] [pid 57624:tid 57624] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:14.885900 2026] [ssl:warn] [pid 22590:tid 22590] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:14.885925 2026] [ssl:warn] [pid 22590:tid 22590] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:16.927036 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:16.927064 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:14.960762 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:14.960790 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:29.828638 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:29.828674 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:50:24.869107 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:50:24.869134 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 09:00:41.217281 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 09:00:41.217281 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 11:48:09.207488 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 11:48:09.207516 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 12:10:34.109998 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 12:10:34.110025 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:30:04.471598 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:30:04.471608 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:31:10.143905 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:31:10.143932 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:47:46.207862 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:47:46.207889 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:01.461750 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:01.461791 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:16.337965 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:16.337991 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 20:13:26.530080 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 20:13:26.530107 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:49.603642 2026] [ssl:warn] [pid 11313:tid 11313] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:49.603667 2026] [ssl:warn] [pid 11313:tid 11313] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:51.684181 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:51.684222 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:05.633534 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:05.633573 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:14.804191 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:14.804219 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:21.068221 2026] [ssl:warn] [pid 11875:tid 11875] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:21.068300 2026] [ssl:warn] [pid 11875:tid 11875] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:23.418915 2026] [ssl:warn] [pid 11880:tid 11880] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:23.418941 2026] [ssl:warn] [pid 11880:tid 11880] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:54.331475 2026] [ssl:warn] [pid 49430:tid 49430] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:54.331500 2026] [ssl:warn] [pid 49430:tid 49430] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:56.270220 2026] [ssl:warn] [pid 49433:tid 49433] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:56.270276 2026] [ssl:warn] [pid 49433:tid 49433] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:30.856237 2026] [ssl:warn] [pid 14505:tid 14505] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:30.856414 2026] [ssl:warn] [pid 14505:tid 14505] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:32.774069 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:32.774094 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:05:40.597458 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:05:40.597485 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:06:05.577185 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:06:05.577209 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:15:30.201016 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:15:30.201042 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:22:25.823814 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:22:25.823841 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:46.190498 2026] [ssl:warn] [pid 53686:tid 53686] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:46.190524 2026] [ssl:warn] [pid 53686:tid 53686] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:48.303634 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:48.303659 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:57.139762 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:57.139791 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:06.441290 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:06.441342 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:14.219567 2026] [ssl:warn] [pid 54234:tid 54234] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:14.219593 2026] [ssl:warn] [pid 54234:tid 54234] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:16.187335 2026] [ssl:warn] [pid 54236:tid 54236] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:16.187361 2026] [ssl:warn] [pid 54236:tid 54236] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:39.874044 2026] [ssl:warn] [pid 26584:tid 26584] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:39.874071 2026] [ssl:warn] [pid 26584:tid 26584] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:41.819418 2026] [ssl:warn] [pid 26587:tid 26587] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:41.819435 2026] [ssl:warn] [pid 26587:tid 26587] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:16.875703 2026] [ssl:warn] [pid 56683:tid 56683] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:16.875729 2026] [ssl:warn] [pid 56683:tid 56683] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:18.852928 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:18.852952 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:37:12.043014 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:37:12.043041 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:38:04.440859 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:38:04.440885 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 09:49:16.669725 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 09:49:16.669753 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 10:16:51.021992 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 10:16:51.022033 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:11.688666 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:11.688695 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:24.631757 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:24.631780 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:36.977594 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:36.977626 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:06.616314 2026] [ssl:warn] [pid 14108:tid 14108] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:06.616349 2026] [ssl:warn] [pid 14108:tid 14108] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:08.737026 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:08.737052 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:22.931456 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:22.931482 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:32.109183 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:32.109209 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:39.015877 2026] [ssl:warn] [pid 14745:tid 14745] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:39.015909 2026] [ssl:warn] [pid 14745:tid 14745] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:40.965189 2026] [ssl:warn] [pid 14747:tid 14747] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:40.965215 2026] [ssl:warn] [pid 14747:tid 14747] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:07.131806 2026] [ssl:warn] [pid 52781:tid 52781] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:07.131833 2026] [ssl:warn] [pid 52781:tid 52781] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:09.089291 2026] [ssl:warn] [pid 52785:tid 52785] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:09.089316 2026] [ssl:warn] [pid 52785:tid 52785] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:52.220503 2026] [ssl:warn] [pid 18059:tid 18059] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:52.220556 2026] [ssl:warn] [pid 18059:tid 18059] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:54.217463 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:54.217493 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 16:30:13.459928 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 16:30:13.459958 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:47:52.791667 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:47:52.791735 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:53:10.423582 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:53:10.423608 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:54:01.948250 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:54:01.948276 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:55:50.725761 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:55:50.725788 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:56:35.266628 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:56:35.266656 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:00.222478 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:00.222478 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:35.921839 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:35.921866 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:03:32.401985 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:03:32.402012 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:04:02.684304 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:04:02.684330 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:05:34.483981 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:05:34.484014 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:06:02.950619 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:06:02.950648 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:51.533110 2026] [ssl:warn] [pid 11075:tid 11075] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:51.533140 2026] [ssl:warn] [pid 11075:tid 11075] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:53.611431 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:53.611457 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:06.817612 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:06.817637 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:15.972447 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:15.972472 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:28.897071 2026] [ssl:warn] [pid 11656:tid 11656] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:28.897098 2026] [ssl:warn] [pid 11656:tid 11656] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:30.916226 2026] [ssl:warn] [pid 11658:tid 11658] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:30.916280 2026] [ssl:warn] [pid 11658:tid 11658] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:16.819416 2026] [ssl:warn] [pid 7543:tid 7543] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:16.819444 2026] [ssl:warn] [pid 7543:tid 7543] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:19.315455 2026] [ssl:warn] [pid 7549:tid 7549] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:19.315482 2026] [ssl:warn] [pid 7549:tid 7549] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:03.462144 2026] [ssl:warn] [pid 37959:tid 37959] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:03.462169 2026] [ssl:warn] [pid 37959:tid 37959] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:05.434444 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:05.434488 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:29:07.585407 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:29:07.585485 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:32:16.847173 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:32:16.847199 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:49.536507 2026] [ssl:warn] [pid 55782:tid 55782] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:49.536533 2026] [ssl:warn] [pid 55782:tid 55782] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:51.584478 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:51.584505 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:08.946734 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:08.946760 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:17.962021 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:17.962047 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:25.871744 2026] [ssl:warn] [pid 56401:tid 56401] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:25.871770 2026] [ssl:warn] [pid 56401:tid 56401] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:27.759636 2026] [ssl:warn] [pid 56404:tid 56404] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:27.759660 2026] [ssl:warn] [pid 56404:tid 56404] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:44.383927 2026] [ssl:warn] [pid 22691:tid 22691] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:44.383953 2026] [ssl:warn] [pid 22691:tid 22691] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:46.297091 2026] [ssl:warn] [pid 22694:tid 22694] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:46.297117 2026] [ssl:warn] [pid 22694:tid 22694] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:04.725569 2026] [ssl:warn] [pid 53374:tid 53374] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:04.725596 2026] [ssl:warn] [pid 53374:tid 53374] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:06.652046 2026] [ssl:warn] [pid 53383:tid 53383] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:06.652072 2026] [ssl:warn] [pid 53383:tid 53383] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:54.660962 2026] [ssl:warn] [pid 31819:tid 31819] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:54.660982 2026] [ssl:warn] [pid 31819:tid 31819] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:56.864337 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:56.864347 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:04.731640 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:04.731665 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:14.183850 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:14.183876 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:28.198660 2026] [ssl:warn] [pid 32490:tid 32490] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:28.198685 2026] [ssl:warn] [pid 32490:tid 32490] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:30.181435 2026] [ssl:warn] [pid 32493:tid 32493] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:30.181460 2026] [ssl:warn] [pid 32493:tid 32493] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:25.355590 2026] [ssl:warn] [pid 10238:tid 10238] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:25.355618 2026] [ssl:warn] [pid 10238:tid 10238] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:27.369309 2026] [ssl:warn] [pid 10241:tid 10241] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:27.369336 2026] [ssl:warn] [pid 10241:tid 10241] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:00.628683 2026] [ssl:warn] [pid 40572:tid 40572] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:00.628710 2026] [ssl:warn] [pid 40572:tid 40572] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:02.639407 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:02.639433 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 05:59:22.884616 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 05:59:22.884653 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:53.582453 2026] [ssl:warn] [pid 54722:tid 54722] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:53.582478 2026] [ssl:warn] [pid 54722:tid 54722] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:55.740551 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:55.740578 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:18.658542 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:18.658591 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:27.866605 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:27.866632 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:41.641115 2026] [ssl:warn] [pid 55407:tid 55407] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:41.641155 2026] [ssl:warn] [pid 55407:tid 55407] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:43.543895 2026] [ssl:warn] [pid 55411:tid 55411] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:43.543921 2026] [ssl:warn] [pid 55411:tid 55411] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:31.964814 2026] [ssl:warn] [pid 26733:tid 26733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:31.964840 2026] [ssl:warn] [pid 26733:tid 26733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:33.864793 2026] [ssl:warn] [pid 26736:tid 26736] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:33.864817 2026] [ssl:warn] [pid 26736:tid 26736] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:55.705364 2026] [ssl:warn] [pid 56998:tid 56998] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:55.705391 2026] [ssl:warn] [pid 56998:tid 56998] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:57.633734 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:57.633761 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:24:47.283027 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:24:47.283056 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:18.554895 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:18.554940 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:40.148156 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:40.148182 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:26:02.195336 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:26:02.195364 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:18:00.040353 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:18:00.040423 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:15.231639 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:15.231666 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:38.600202 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:38.600227 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:23.898563 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:23.898591 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:40.294888 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:40.294929 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:51.122970 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:51.122996 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:04.325228 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:04.325286 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:13.065313 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:13.065343 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:35:49.535785 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:35:49.535813 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:40.270154 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:40.270182 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:49.270848 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:49.270874 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:52.251842 2026] [ssl:warn] [pid 36255:tid 36255] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:52.251879 2026] [ssl:warn] [pid 36255:tid 36255] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:54.369931 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:54.369956 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:16.605915 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:16.605940 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:25.725534 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:25.725534 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:32.784423 2026] [ssl:warn] [pid 36940:tid 36940] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:32.784452 2026] [ssl:warn] [pid 36940:tid 36940] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:34.833218 2026] [ssl:warn] [pid 36957:tid 36957] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:34.833277 2026] [ssl:warn] [pid 36957:tid 36957] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:41.524676 2026] [ssl:warn] [pid 8527:tid 8527] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:41.524705 2026] [ssl:warn] [pid 8527:tid 8527] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:43.448709 2026] [ssl:warn] [pid 8533:tid 8533] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:43.448734 2026] [ssl:warn] [pid 8533:tid 8533] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:31.866971 2026] [ssl:warn] [pid 39013:tid 39013] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:31.866999 2026] [ssl:warn] [pid 39013:tid 39013] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:33.747587 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:33.747630 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 10:11:44.765376 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 10:11:44.765406 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:43.400805 2026] [ssl:warn] [pid 46843:tid 46843] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:43.400833 2026] [ssl:warn] [pid 46843:tid 46843] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:45.389666 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:45.389692 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:03.555561 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:03.555587 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:12.195237 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:12.195237 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:17.110130 2026] [ssl:warn] [pid 47514:tid 47514] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:17.110157 2026] [ssl:warn] [pid 47514:tid 47514] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:18.989052 2026] [ssl:warn] [pid 47519:tid 47519] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:18.989078 2026] [ssl:warn] [pid 47519:tid 47519] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:28:59.952152 2026] [ssl:warn] [pid 18766:tid 18766] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:28:59.952180 2026] [ssl:warn] [pid 18766:tid 18766] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:29:01.876416 2026] [ssl:warn] [pid 18769:tid 18769] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:29:01.876443 2026] [ssl:warn] [pid 18769:tid 18769] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:47.156912 2026] [ssl:warn] [pid 48704:tid 48704] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:47.156939 2026] [ssl:warn] [pid 48704:tid 48704] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:49.089873 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:49.089899 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:19:29.702610 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:19:29.702650 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:20:18.879789 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:20:18.879817 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:29:26.430851 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:29:26.430878 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:30:07.172418 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:30:07.172446 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:52.048399 2026] [ssl:warn] [pid 25963:tid 25963] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:52.048429 2026] [ssl:warn] [pid 25963:tid 25963] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:54.118840 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:54.118877 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:09.392755 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:09.392782 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:18.378032 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:18.378066 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:26.078215 2026] [ssl:warn] [pid 26549:tid 26549] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:26.078271 2026] [ssl:warn] [pid 26549:tid 26549] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:27.972778 2026] [ssl:warn] [pid 26552:tid 26552] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:27.972804 2026] [ssl:warn] [pid 26552:tid 26552] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:52.880834 2026] [ssl:warn] [pid 64508:tid 64508] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:52.880861 2026] [ssl:warn] [pid 64508:tid 64508] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:54.809686 2026] [ssl:warn] [pid 64526:tid 64526] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:54.809712 2026] [ssl:warn] [pid 64526:tid 64526] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:48.689392 2026] [ssl:warn] [pid 29552:tid 29552] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:48.689419 2026] [ssl:warn] [pid 29552:tid 29552] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:50.590348 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:50.590372 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:35.081021 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:35.081065 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:43.540687 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:43.540713 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:53.566998 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:53.567025 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:31:58.464801 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:31:58.464827 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 14:14:11.013583 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 14:14:11.013611 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:37.793553 2026] [ssl:warn] [pid 48740:tid 48740] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:37.793581 2026] [ssl:warn] [pid 48740:tid 48740] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:39.785309 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:39.785335 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:53.869102 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:53.869128 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:03.666126 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:03.666151 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:10.349872 2026] [ssl:warn] [pid 49348:tid 49348] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:10.349934 2026] [ssl:warn] [pid 49348:tid 49348] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:12.283932 2026] [ssl:warn] [pid 49350:tid 49350] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:12.283960 2026] [ssl:warn] [pid 49350:tid 49350] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:29:59.066737 2026] [ssl:warn] [pid 20828:tid 20828] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:29:59.066766 2026] [ssl:warn] [pid 20828:tid 20828] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:30:00.960007 2026] [ssl:warn] [pid 20830:tid 20830] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:30:00.960033 2026] [ssl:warn] [pid 20830:tid 20830] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:36:58.009792 2026] [ssl:warn] [pid 50948:tid 50948] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:36:58.009817 2026] [ssl:warn] [pid 50948:tid 50948] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:37:00.320462 2026] [ssl:warn] [pid 50952:tid 50952] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:37:00.320488 2026] [ssl:warn] [pid 50952:tid 50952] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:39.822316 2026] [ssl:warn] [pid 6602:tid 6602] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:39.822346 2026] [ssl:warn] [pid 6602:tid 6602] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:42.025647 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:42.025683 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:00.455753 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:00.455779 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:09.692586 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:09.692619 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:23.415794 2026] [ssl:warn] [pid 7314:tid 7314] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:23.415821 2026] [ssl:warn] [pid 7314:tid 7314] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:25.315026 2026] [ssl:warn] [pid 7321:tid 7321] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:25.315051 2026] [ssl:warn] [pid 7321:tid 7321] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:48.523130 2026] [ssl:warn] [pid 44184:tid 44184] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:48.523155 2026] [ssl:warn] [pid 44184:tid 44184] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:50.469673 2026] [ssl:warn] [pid 44186:tid 44186] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:50.469698 2026] [ssl:warn] [pid 44186:tid 44186] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:48.853676 2026] [ssl:warn] [pid 9346:tid 9346] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:48.853703 2026] [ssl:warn] [pid 9346:tid 9346] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:50.791338 2026] [ssl:warn] [pid 9349:tid 9349] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:50.791363 2026] [ssl:warn] [pid 9349:tid 9349] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:39.701079 2026] [ssl:warn] [pid 36125:tid 36125] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:39.701105 2026] [ssl:warn] [pid 36125:tid 36125] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:41.605888 2026] [ssl:warn] [pid 36127:tid 36127] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:41.605913 2026] [ssl:warn] [pid 36127:tid 36127] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:43.826340 2026] [ssl:warn] [pid 9099:tid 9099] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:43.826368 2026] [ssl:warn] [pid 9099:tid 9099] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:45.737041 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:45.737060 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:34.745950 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:34.745980 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:38.678058 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:38.678083 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:49.223695 2026] [ssl:warn] [pid 52728:tid 52728] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:49.223722 2026] [ssl:warn] [pid 52728:tid 52728] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:51.116997 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:51.117053 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:04.131978 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:04.132005 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:15.019602 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:15.019628 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:21.502779 2026] [ssl:warn] [pid 54248:tid 54248] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:21.502806 2026] [ssl:warn] [pid 54248:tid 54248] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:23.389590 2026] [ssl:warn] [pid 54251:tid 54251] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:23.389629 2026] [ssl:warn] [pid 54251:tid 54251] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:39.672078 2026] [ssl:warn] [pid 31242:tid 31242] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:39.672113 2026] [ssl:warn] [pid 31242:tid 31242] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:41.607588 2026] [ssl:warn] [pid 31270:tid 31270] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:41.607626 2026] [ssl:warn] [pid 31270:tid 31270] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:35.180480 2026] [ssl:warn] [pid 62745:tid 62745] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:35.180508 2026] [ssl:warn] [pid 62745:tid 62745] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:37.138490 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:37.138544 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 07:27:54.773521 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 07:27:54.773538 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:01:50.895433 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:01:50.895460 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:02:01.221201 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:02:01.221250 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:06:19.409416 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:06:19.409454 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:09:19.983295 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:09:19.983322 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:26:32.482895 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:26:32.482920 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:49:13.524969 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:49:13.525009 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 18:06:02.673194 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 18:06:02.673222 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:50.803537 2026] [ssl:warn] [pid 61206:tid 61206] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:50.803565 2026] [ssl:warn] [pid 61206:tid 61206] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:52.945283 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:52.945311 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:08.467947 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:08.467973 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:17.144641 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:17.144667 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:30.904402 2026] [ssl:warn] [pid 61774:tid 61774] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:30.904428 2026] [ssl:warn] [pid 61774:tid 61774] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:32.770229 2026] [ssl:warn] [pid 61780:tid 61780] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:32.770281 2026] [ssl:warn] [pid 61780:tid 61780] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:05.400351 2026] [ssl:warn] [pid 34333:tid 34333] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:05.400378 2026] [ssl:warn] [pid 34333:tid 34333] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:07.276839 2026] [ssl:warn] [pid 34335:tid 34335] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:07.276865 2026] [ssl:warn] [pid 34335:tid 34335] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:50.169450 2026] [ssl:warn] [pid 65201:tid 65201] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:50.169476 2026] [ssl:warn] [pid 65201:tid 65201] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:52.081581 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:52.081608 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:08:05.500550 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:08:05.500578 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:10:36.189593 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:10:36.189620 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:42.553177 2026] [ssl:warn] [pid 36232:tid 36232] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:42.553204 2026] [ssl:warn] [pid 36232:tid 36232] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:44.583452 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:44.583480 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:58.983611 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:58.983647 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:07.906919 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:07.906945 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:14.623006 2026] [ssl:warn] [pid 36816:tid 36816] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:14.623030 2026] [ssl:warn] [pid 36816:tid 36816] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:16.409840 2026] [ssl:warn] [pid 36820:tid 36820] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:16.409877 2026] [ssl:warn] [pid 36820:tid 36820] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:39.658298 2026] [ssl:warn] [pid 9322:tid 9322] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:39.658340 2026] [ssl:warn] [pid 9322:tid 9322] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:41.480463 2026] [ssl:warn] [pid 9328:tid 9328] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:41.480491 2026] [ssl:warn] [pid 9328:tid 9328] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:03.514795 2026] [ssl:warn] [pid 39898:tid 39898] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:03.514828 2026] [ssl:warn] [pid 39898:tid 39898] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:05.350862 2026] [ssl:warn] [pid 39904:tid 39904] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:05.350886 2026] [ssl:warn] [pid 39904:tid 39904] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:42.512040 2026] [ssl:warn] [pid 19773:tid 19773] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:42.512040 2026] [ssl:warn] [pid 19773:tid 19773] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:44.687050 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:44.687076 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:56.721294 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:56.721321 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:05.937449 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:05.937476 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:13.673564 2026] [ssl:warn] [pid 20341:tid 20341] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:13.673590 2026] [ssl:warn] [pid 20341:tid 20341] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:15.558283 2026] [ssl:warn] [pid 20343:tid 20343] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:15.558323 2026] [ssl:warn] [pid 20343:tid 20343] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:04.460122 2026] [ssl:warn] [pid 57956:tid 57956] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:04.460151 2026] [ssl:warn] [pid 57956:tid 57956] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:06.346386 2026] [ssl:warn] [pid 57959:tid 57959] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:06.346413 2026] [ssl:warn] [pid 57959:tid 57959] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:57.074586 2026] [ssl:warn] [pid 23733:tid 23733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:57.074612 2026] [ssl:warn] [pid 23733:tid 23733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:58.964222 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:58.964278 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:04.992483 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:04.992510 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:18.133476 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:18.133489 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:37.905149 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:37.905175 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:49:53.353702 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:49:53.353737 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:50.562533 2026] [ssl:warn] [pid 7356:tid 7356] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:50.562561 2026] [ssl:warn] [pid 7356:tid 7356] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:52.649532 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:52.649544 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:08.653417 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:08.653460 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:18.166254 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:18.166282 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:31.918939 2026] [ssl:warn] [pid 7942:tid 7942] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:31.919004 2026] [ssl:warn] [pid 7942:tid 7942] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:33.793312 2026] [ssl:warn] [pid 7947:tid 7947] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:33.793337 2026] [ssl:warn] [pid 7947:tid 7947] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:43.243039 2026] [ssl:warn] [pid 45735:tid 45735] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:43.243066 2026] [ssl:warn] [pid 45735:tid 45735] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:45.071120 2026] [ssl:warn] [pid 45740:tid 45740] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:45.071145 2026] [ssl:warn] [pid 45740:tid 45740] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:53.490643 2026] [ssl:warn] [pid 11534:tid 11534] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:53.490668 2026] [ssl:warn] [pid 11534:tid 11534] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:55.322300 2026] [ssl:warn] [pid 11536:tid 11536] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:55.322325 2026] [ssl:warn] [pid 11536:tid 11536] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:51.936149 2026] [ssl:warn] [pid 62684:tid 62684] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:51.936180 2026] [ssl:warn] [pid 62684:tid 62684] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:53.999221 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:53.999278 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:09.353443 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:09.353468 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:18.399750 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:18.399775 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:29.163556 2026] [ssl:warn] [pid 63259:tid 63259] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:29.163595 2026] [ssl:warn] [pid 63259:tid 63259] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:31.034559 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:31.034585 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:39:43.980005 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:39:43.980006 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:42.274146 2026] [ssl:warn] [pid 35750:tid 35750] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:42.274188 2026] [ssl:warn] [pid 35750:tid 35750] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:44.122055 2026] [ssl:warn] [pid 35753:tid 35753] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:44.122082 2026] [ssl:warn] [pid 35753:tid 35753] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:27.216116 2026] [ssl:warn] [pid 1135:tid 1135] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:27.216140 2026] [ssl:warn] [pid 1135:tid 1135] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:29.060659 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:29.060684 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:01.186651 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:01.186688 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:05.033727 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:05.033769 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:46.244900 2026] [ssl:warn] [pid 20134:tid 20134] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:46.244931 2026] [ssl:warn] [pid 20134:tid 20134] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:48.315928 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:48.315964 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:04.133605 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:04.133630 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:12.730688 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:12.730714 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:18.468517 2026] [ssl:warn] [pid 20707:tid 20707] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:18.468542 2026] [ssl:warn] [pid 20707:tid 20707] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:20.308363 2026] [ssl:warn] [pid 20712:tid 20712] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:20.308390 2026] [ssl:warn] [pid 20712:tid 20712] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:10.624871 2026] [ssl:warn] [pid 58568:tid 58568] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:10.624898 2026] [ssl:warn] [pid 58568:tid 58568] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:12.460343 2026] [ssl:warn] [pid 58570:tid 58570] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:12.460368 2026] [ssl:warn] [pid 58570:tid 58570] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:03.462058 2026] [ssl:warn] [pid 24538:tid 24538] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:03.462084 2026] [ssl:warn] [pid 24538:tid 24538] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:05.285689 2026] [ssl:warn] [pid 24822:tid 24822] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:05.285715 2026] [ssl:warn] [pid 24822:tid 24822] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:41.504748 2026] [ssl:warn] [pid 50040:tid 50040] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:41.504775 2026] [ssl:warn] [pid 50040:tid 50040] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:43.554863 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:43.554888 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:58.156431 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:58.156456 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:08.982303 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:08.982328 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:14.725425 2026] [ssl:warn] [pid 50916:tid 50916] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:14.725451 2026] [ssl:warn] [pid 50916:tid 50916] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:16.520807 2026] [ssl:warn] [pid 50918:tid 50918] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:16.520834 2026] [ssl:warn] [pid 50918:tid 50918] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:28.951451 2026] [ssl:warn] [pid 28339:tid 28339] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:28.951478 2026] [ssl:warn] [pid 28339:tid 28339] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:30.699464 2026] [ssl:warn] [pid 28342:tid 28342] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:30.699503 2026] [ssl:warn] [pid 28342:tid 28342] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:49.461768 2026] [ssl:warn] [pid 59002:tid 59002] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:49.461796 2026] [ssl:warn] [pid 59002:tid 59002] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:51.313544 2026] [ssl:warn] [pid 59010:tid 59010] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:51.313570 2026] [ssl:warn] [pid 59010:tid 59010] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:42.634756 2026] [ssl:warn] [pid 16759:tid 16759] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:42.634785 2026] [ssl:warn] [pid 16759:tid 16759] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:44.648585 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:44.648591 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:57.713733 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:57.713758 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:06.409165 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:06.409191 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:14.043165 2026] [ssl:warn] [pid 17332:tid 17332] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:14.043190 2026] [ssl:warn] [pid 17332:tid 17332] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:15.827174 2026] [ssl:warn] [pid 17334:tid 17334] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:15.827201 2026] [ssl:warn] [pid 17334:tid 17334] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:10.324138 2026] [ssl:warn] [pid 55108:tid 55108] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:10.324165 2026] [ssl:warn] [pid 55108:tid 55108] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:12.149367 2026] [ssl:warn] [pid 55110:tid 55110] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:12.149394 2026] [ssl:warn] [pid 55110:tid 55110] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:56.026000 2026] [ssl:warn] [pid 20730:tid 20730] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:56.026035 2026] [ssl:warn] [pid 20730:tid 20730] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:57.819020 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:57.819065 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:36:39.155947 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:36:39.155986 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:37:19.484333 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:37:19.484361 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:40:27.089865 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:40:27.089899 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:04.430098 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:04.430123 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:32.777076 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:32.777102 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:42:02.456389 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:42:02.456415 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:10.483219 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:10.483281 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:47.570701 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:47.570739 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:44:33.393273 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:44:33.393301 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:46:19.748307 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:46:19.748345 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:41.988445 2026] [ssl:warn] [pid 33962:tid 33962] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:41.988476 2026] [ssl:warn] [pid 33962:tid 33962] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:44.009067 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:44.009094 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:59.628338 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:59.628365 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:09.867682 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:09.867708 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:20.638488 2026] [ssl:warn] [pid 34537:tid 34537] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:20.638515 2026] [ssl:warn] [pid 34537:tid 34537] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:22.484069 2026] [ssl:warn] [pid 34546:tid 34546] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:22.484098 2026] [ssl:warn] [pid 34546:tid 34546] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:28.375993 2026] [ssl:warn] [pid 7132:tid 7132] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:28.376023 2026] [ssl:warn] [pid 7132:tid 7132] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:30.215920 2026] [ssl:warn] [pid 7138:tid 7138] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:30.215957 2026] [ssl:warn] [pid 7138:tid 7138] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:28.310025 2026] [ssl:warn] [pid 38651:tid 38651] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:28.310050 2026] [ssl:warn] [pid 38651:tid 38651] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:30.100473 2026] [ssl:warn] [pid 38653:tid 38653] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:30.100500 2026] [ssl:warn] [pid 38653:tid 38653] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:56.761344 2026] [ssl:warn] [pid 53855:tid 53855] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:56.761373 2026] [ssl:warn] [pid 53855:tid 53855] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:58.766348 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:58.766374 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:28:50.135887 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:28:50.135932 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:04.256349 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:04.256386 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:18.030775 2026] [ssl:warn] [pid 54586:tid 54586] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:18.030800 2026] [ssl:warn] [pid 54586:tid 54586] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:19.857553 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:19.857580 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:22.695933 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:22.695958 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:55.498119 2026] [ssl:warn] [pid 27687:tid 27687] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:55.498145 2026] [ssl:warn] [pid 27687:tid 27687] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:57.303757 2026] [ssl:warn] [pid 27691:tid 27691] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:57.303783 2026] [ssl:warn] [pid 27691:tid 27691] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:44.945883 2026] [ssl:warn] [pid 59180:tid 59180] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:44.945908 2026] [ssl:warn] [pid 59180:tid 59180] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:46.777005 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:46.777030 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 07:54:38.433855 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 07:54:38.433893 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:07.914617 2026] [ssl:warn] [pid 44370:tid 44370] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:07.914696 2026] [ssl:warn] [pid 44370:tid 44370] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:10.999572 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:10.999600 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:44:52.315524 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:44:52.315551 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:03.262244 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:03.262329 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:10.020185 2026] [ssl:warn] [pid 46101:tid 46101] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:10.020185 2026] [ssl:warn] [pid 46101:tid 46101] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:11.794095 2026] [ssl:warn] [pid 46103:tid 46103] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:11.794121 2026] [ssl:warn] [pid 46103:tid 46103] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:54.118355 2026] [ssl:warn] [pid 19080:tid 19080] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:54.118398 2026] [ssl:warn] [pid 19080:tid 19080] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:56.211367 2026] [ssl:warn] [pid 19104:tid 19104] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:56.211394 2026] [ssl:warn] [pid 19104:tid 19104] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:28.990983 2026] [ssl:warn] [pid 49834:tid 49834] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:28.991041 2026] [ssl:warn] [pid 49834:tid 49834] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:30.749750 2026] [ssl:warn] [pid 49837:tid 49837] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:30.749776 2026] [ssl:warn] [pid 49837:tid 49837] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:53.542020 2026] [ssl:warn] [pid 10225:tid 10225] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:53.542045 2026] [ssl:warn] [pid 10225:tid 10225] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:58.402385 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:58.402411 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:12.809948 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:12.809976 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:26.208522 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:26.208563 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:32.142427 2026] [ssl:warn] [pid 11104:tid 11104] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:32.142454 2026] [ssl:warn] [pid 11104:tid 11104] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:33.923925 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:33.923964 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:50:37.345834 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:50:37.345860 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:01.543292 2026] [ssl:warn] [pid 49374:tid 49374] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:01.543319 2026] [ssl:warn] [pid 49374:tid 49374] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:03.325208 2026] [ssl:warn] [pid 49376:tid 49376] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:03.325265 2026] [ssl:warn] [pid 49376:tid 49376] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:49.550144 2026] [ssl:warn] [pid 15542:tid 15542] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:49.550171 2026] [ssl:warn] [pid 15542:tid 15542] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:51.308491 2026] [ssl:warn] [pid 15544:tid 15544] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:51.308518 2026] [ssl:warn] [pid 15544:tid 15544] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:51.955326 2026] [ssl:warn] [pid 25505:tid 25505] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:51.955355 2026] [ssl:warn] [pid 25505:tid 25505] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:54.376534 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:54.376567 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:02.423352 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:02.423378 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:14.934493 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:14.934518 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:21.303212 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:21.303280 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:23.052710 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:23.052739 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:38:43.051951 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:38:43.051951 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:39:38.856847 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:39:38.856873 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:32.156037 2026] [ssl:warn] [pid 65386:tid 65386] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:32.156063 2026] [ssl:warn] [pid 65386:tid 65386] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:33.871714 2026] [ssl:warn] [pid 65429:tid 65429] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:33.871740 2026] [ssl:warn] [pid 65429:tid 65429] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:49.899851 2026] [ssl:warn] [pid 30894:tid 30894] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:49.899877 2026] [ssl:warn] [pid 30894:tid 30894] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:51.650571 2026] [ssl:warn] [pid 30899:tid 30899] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:51.650628 2026] [ssl:warn] [pid 30899:tid 30899] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:55.772800 2026] [ssl:warn] [pid 40681:tid 40681] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:55.772830 2026] [ssl:warn] [pid 40681:tid 40681] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:58.577012 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:58.577028 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:16.258506 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:16.258533 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:38.708438 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:38.708463 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:52.534856 2026] [ssl:warn] [pid 41969:tid 41969] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:52.534883 2026] [ssl:warn] [pid 41969:tid 41969] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:54.266576 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:54.266602 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:35:08.189244 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:35:08.189316 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:36:29.794866 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:36:29.794892 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:12.532568 2026] [ssl:warn] [pid 20279:tid 20279] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:12.532592 2026] [ssl:warn] [pid 20279:tid 20279] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:14.284607 2026] [ssl:warn] [pid 20283:tid 20283] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:14.284631 2026] [ssl:warn] [pid 20283:tid 20283] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:28.780365 2026] [ssl:warn] [pid 50821:tid 50821] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:28.780398 2026] [ssl:warn] [pid 50821:tid 50821] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:30.548454 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:30.548480 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:42.790208 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:42.790328 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:44.717390 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:44.717415 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:49.431018 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:49.431042 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:50.986920 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:50.986952 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:53.424969 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:53.424994 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:41.103636 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:41.103662 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:43.047002 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:43.047020 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:45.329438 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:45.329465 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:47.745607 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:47.745634 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:51.363859 2026] [ssl:warn] [pid 2860:tid 2860] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:51.363859 2026] [ssl:warn] [pid 2860:tid 2860] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:53.110836 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:53.110865 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:29.302531 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:29.302558 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:44.513834 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:44.513860 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:57.525461 2026] [ssl:warn] [pid 3900:tid 3900] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:57.525485 2026] [ssl:warn] [pid 3900:tid 3900] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:59.367941 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:59.367967 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:13:46.162621 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:13:46.162648 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:06.619742 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:06.619781 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:31.314415 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:31.314440 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:54.591683 2026] [ssl:warn] [pid 43697:tid 43697] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:54.591710 2026] [ssl:warn] [pid 43697:tid 43697] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:56.347015 2026] [ssl:warn] [pid 43703:tid 43703] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:56.347040 2026] [ssl:warn] [pid 43703:tid 43703] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:03.301863 2026] [ssl:warn] [pid 9257:tid 9257] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:03.301889 2026] [ssl:warn] [pid 9257:tid 9257] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:05.015852 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:05.015878 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:15.115553 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:15.115579 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:21.196273 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:21.196301 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:52.664946 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:52.664971 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:58.048682 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:58.048717 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:48.256571 2026] [ssl:warn] [pid 13712:tid 13712] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:48.256601 2026] [ssl:warn] [pid 13712:tid 13712] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:51.179623 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:51.179652 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:12.600331 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:12.600370 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:31.516745 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:31.516770 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:43.675493 2026] [ssl:warn] [pid 15299:tid 15299] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:43.675517 2026] [ssl:warn] [pid 15299:tid 15299] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:45.425369 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:45.425393 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:13:50.277866 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:13:50.277894 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:48.904503 2026] [ssl:warn] [pid 54349:tid 54349] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:48.904527 2026] [ssl:warn] [pid 54349:tid 54349] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:50.638598 2026] [ssl:warn] [pid 54367:tid 54367] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:50.638623 2026] [ssl:warn] [pid 54367:tid 54367] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:08.738333 2026] [ssl:warn] [pid 19990:tid 19990] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:08.738360 2026] [ssl:warn] [pid 19990:tid 19990] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:10.487602 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:10.487628 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:26:00.949633 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:26:00.949661 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:07.042795 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:07.042834 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:41.466788 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: jandakotpilotshop.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:41.466815 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: jandakotpilotshop.com:443:0 server certificate does NOT include an ID which matches the server name